Multiparticle entanglement purification for two-colorable graph states 
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We investigate multiparticle entanglement purification schemes which allow one to purify all two 
colorable graph states, a class of states which includes e.g. cluster states, GHZ states and codewords 
of various error correction codes. The schemes include both recurrence protocols and hashing proto- 
cols. We analyze these schemes under realistic conditions and observe for a generic error model that 
the threshold value for imperfect local operations depends on the structure of the corresponding 
interaction graph, but is otherwise independent of the number of parties. The qualitative behavior 
can be understood from an analytically solvable model which deals only with a restricted class of 
errors. We compare direct multiparticle entanglement purification protocols with schemes based on 
bipartite entanglement purification and show that the direct multiparticle entanglement purification 
is more efficient and the achievable fidelity of the purified states is larger. We also show that the 
purification protocol allows one to produce private entanglement, an important aspect when using 
the produced entangled states for secure applications. Finally we discuss an experimental realiza- 
tion of a multiparty purification protocol in optical lattices which is issued to improve the fidelity 
of cluster states created in such systems. 

PACS numbers: 03.67.-a, 03.67.Mn, 03.67.Pp, 03.67.Hk 



I. INTRODUCTION 

In recent years a number of surprising, unexpected ap- 
plications of entangled states have been developed. In 
the bipartite case, teleportation Q], superdense coding 
and entanglement based quantum cryptography [jj 
are well-known examples. In the multipartite case it was 
shown that multiparticle entangled states (MES) allow 
one not only to accomplish several tasks in multi-party 
communication scenarios — such as secret sharing or se- 
cure function evaluation Q — but also to improve the 
precision of frequency measurements, leading to higher 
frequency standards |a,[3- Furthermore, many error cor- 
rection codes are based on MES, and certain MES — the 
so-called cluster states @ — have even been shown to 
constitute a universal resource for quantum computation 
when assisted by local measurements only |9|. 

All these applications require the use of certain bi- 
partite or multipartite entangled pure states. In real- 
ity, however, those states will not be available with unit 
fidelity. On the one hand, the operations required to cre- 
ate the states will be noisy. On the other hand, the MES 
interact with the environment and will be subjected to 
decoherence, or the particles constituting the entangled 
state have to be sent through noisy quantum channels 
in a communication scenario with distant parties. Thus 
in practice only mixed states rather than pure states are 
available and it is a central problem to establish methods 
to increase the quality of the states by some means. 

In principle, entanglement purification provides a 
method to accomplish this task. Efficient protocols to 
obtain a few high-fidelity entangled states from several 
low-fidelity entangled states by using local operations 
and classical communication are known. Most purifica- 



tion protocols for qubits introduced so far are only ca- 
pable to purify a specific type of states, namely states 
which are equivalent up to local unitary operations to 
states of the formjO)®^ + \1)® N , the so called "GHZ" 
states llOl [llj, [l2|, [l3| . Only quite recently, we have intro- 
duced 14] multiparticle entanglement purification proto- 
cols (MEPPs) which are capable of purifying all two col- 
orable graph states, a class of multi-qubit states which 
will be defined below and which includes, for instance, 
GHZ states, cluster states and codewords of error correc- 
tion codes. In this paper, we provide a detailed analysis 
of these protocols and provide addition material, includ- 
ing a hashing protocol for this class of states and a com- 
parison of multiparticle entanglement purification with 
protocols based on bipartite entanglement purification. 

The paper is organized as follows. In Sec. [H] we re- 
view the concept of graph states, fix some notation and 
highlight a number of useful properties of these states. 
Sec. IIIII is concerned with multiparticle entanglement 
purification protocols. On the one hand, we review the 
recurrence protocol introduced in Ref. [Tj| in Sec. IIII Al 
and analyze in detail its properties. We investigate the 
purification regime, the convergence, as well as the effi- 
ciency of the procedure. We provide both analytic anal- 
ysis for certain low rank states and a numerical analysis 
for generic states. On the other hand, we introduce in 
Sec. IIIIBI a hashing protocol which is capable of purify- 
ing two colorable graph states with a finite yield. In Sec. 
IIVI we analyze numerically the recurrence protocol for 
different target states — in particular cluster states and 
GHZ states — under realistic conditions using a generic 
error model of local control operations. We determine 
the purification regime, i.e. the minimum required and 
maximal reachable fidelity, as well as the threshold value 
for noise in local operations below which the purification 
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protocol can be successfully applied. An analytic treat- 
ment for a restricted error model is carried out in Sec. 
fvl recovering essentially the same behavior as for the 
generic error model. In Sec. IVII multiparticle entangle- 
ment purification protocols are compared with protocols 
based on bipartite entanglement purification. We ana- 
lyze both the case of noiseless local operations as well as 
noisy local operations. We find in the former case that 
direct multiparticle entanglement purification is more ef- 
ficient than any scheme based on bipartite purification. 
In the latter case, the reachable fidelity is higher. In Sec. 
IVIII we are concerned with security aspects of our proto- 
cols and show that the purified entanglement is private. 
Sec. I Villi deals with a number of possible applications of 
the purification protocols. A possible experimental im- 
plementation based on neutral atoms in an optical lattice 
is discussed in Sec. IIXI We summarize and conclude in 
Sec. K| 



II. GRAPH STATES: BASIC PRINCIPLES AND 
PROPERTIES 

A. Graph states 

In this section, we review the concept of graph states, 
describe some of their properties and fix notation. Graph 
states have first been introduced in Ref. [laf, generaliz- 
ing the notion of cluster states as introduced in Ref. [3 . 
A detailed investigation of their entanglement proper- 
ties has recently been given in the paper by Hcin ct al. 
|19|. Graph states occur in various contexts in quantum 
information theory, in which multi-party quantum cor- 
relations play a central role. Examples are multi-party 
quantum communication, measurement-based quantum 
computation, and quantum error correction. Using ter- 
minology of standard quantum mechanics textbooks, a 
graph state can be described as the common eigenstate 
of a complete set of commuting observables . The graph 
associated with a given graph state can thus be regarded 
as a shorthand notation for its complete set of commut- 
ing observables. In quantum error correction, the set of 
commuting observables is also referred to as the stabilizer 
group of the state. Note, however, that for the purpose 
of quantum error correction, the stabilizer is usually not 
complete, since degenerate subspaces are used as code 
spaces. The graph codes introduced in Ref. 0] take ac- 
count of this fact, and can be regarded as an application 
of graph states in the specific context of quantum error 
correction. 

Consider a graph Q — (V, E) which is a set of vertices 
V connected in a specific way by edges E. The edges 
specify a neighborhood relation between vertices. Asso- 
ciated with any graph Q are a set of N = \V\ commuting 
correlation operators 

{k,j}eE 



That is, to any vertex j corresponds a correlation oper- 
ator Kj which is given by the spin 1/2 Pauli operator 
a x on vertex j, a z on all neighboring vertices of j , i.e. 
all vertices k which arc connected to j by edges, and the 
identity operator on the remaining vertices. Graph states 
associated with Q, |4 , A , lM2 ... Aliv ), € {0, 1}, are the joint 
eigenstates of the set of hermitean operators {Kj\j E V} 
which fulfill the eigenvalue equations 

Kj\*m>..*»)o = (-iri«W 2 ... M >6 Vj. (2) 

For notational convenience we will omit the index Q 
whenever there is no danger of confusion, |^ r ^ 1 ^ 2 —Auv)6 = 
|*/*i/i 2 ...|w)- Notc tnat tne graph states {|* MlM2 ... wv )s} 
are uniquely defined by the eigenvalue equations and 
form a basis in H = (C 2 )®^, i.e. 

I fJ,lfJ,2—/J>N \ ^V1U2—Un)\ = ( ^Ml I/ l^M2^2 • ■ 1 ^MNfJV 1 
1 

l*WM....W><*/iiM»...wl = l ( 3 ) 

1*1,^2,— ,HN=0 

We remark that apart from the description of graph 
states by a set of commuting correlation observables, one 
can also give an equivalent description of the state in 
terms of an "interaction graph" To be specific, 

consider the interaction Hamiltonian 

H kl = (1<*> - )/2 ® - <7« )/2, (4) 

which acts on particles k and I and corresponds, up to 
local unitary operations, to an Ising interaction. We 
consider the initial state \ip) where all particles are pre- 
pared in the state |+) with |+) = 1/^2(10) + |1>), i.e. 
|V-') = |+)® . For a fixed graph Q, the corresponding 
graph state |^E'oo...o) is obtained by applying on the state 
\ip) the interaction Hamiltonian Hki for time t — tt to all 
those pairs of particles whose vertices in the correspond- 
ing graph are connected by edges, that is 

|*oo...o>= II e- feH «|+) 8JV . (5) 

(kd)eE 

Note that graph states constitute a large family of 
multiparticle entangled states with various entanglement 
properties. To be specific, for a fixed N we have 
2iV(iV-i)/2 different graphs, although not all of them are 
inequivalent and correspond to different kinds of entan- 
glement (see Sec. IIIDf) . Throughout the paper, we will 
mainly consider two-colorable graphs, that are graphs 
for which a partition of the vertices into two disjoint sets 
V A U Vb = V with Na = \V A \,N B = \V B \,N = N a + N b 
exists such that no vertices within one set are connected 
by edges (equivalently, a two-coloring of the graph with 
respect to its vertices exist). The states arising from such 
two-colorable graphs, which we call two-colorable graph 
states (TCGS), include a number of interesting multipar- 
ticle entangled states, e.g. Greenberger-Horne-Zeilinger 
(GHZ) states, cluster states or codewords of certain error 
correction codes. We remark that it was recently shown 
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that two-colorable graph states are in fact equivalent to 
the so called Calderbank-Shor-Steane (CSS) states 
That is, any state that can be written as a two-colorable 
graph state can also be written (up to local unitary trans- 
formations) as a CSS state and vice versa. 



B. Examples 

As a first example, consider the iV-particle GHZ state. 
The graph corresponding to a iV-particle GHZ state 
is given by N vertices {1,2, ... ,N} and edges {l,k}, 
k S {2, 3, . . . , N}. This graph can easily seen to be 
two-colorable by considering the sets Va = {1} and 
Vb = {2,3, ... ,N}. The corresponding two-colorable 
graph state |^oo...o) 1S given by 



|*oo...o) = 1/V2(|0 2 ) ® 10,)® 



N-l 



II; 



|1, 



,®JV-1 



),(6) 



where {\0 Z ), \l z )} [{|0 X }, ll,)}] is the eigenbasis of a z [a x ] 
respectively, with |0 a ) = 1/V2(\0 Z ) + \l z )). 

The graph corresponding to an (open) linear cluster 
state of length N is given by N vertices {1,2,..., N} 
and edges {k, k + 1}, k £ {1, 2, . . . , N — 1}, i.e. all neigh- 
boring vertices are connected by edges. In this case, the 
sets Va [Vb] are given by all odd [even] vertices respec- 
tively, which shows that the graph is two-colorable. The 
corresponding two-colorable graph states for arbitrary N 
are rather difficult to write down explicitly, as the mini- 
mum number of terms required to specify the state in any 
product basis grows exponentially with N 0]. This is 
reflected by the fact that the amount of entanglement of 
these states, as quantified by the Schmidt measure |17| . 
grows linearly with N. For our present purposes an ex- 
plicit expansion is not required, since the description in 
terms of the correlation operators (Eq. J2J) is complete 
and all calculations can be performed using the corre- 
sponding eigenvalue equations. This is one of the main 
advantages of the (abstract) definition of graph states as 
eigenstates of a set of commuting correlation operators 
and it allows for a simplified analytical and numerical 
treatment of protocols operating on graph states. This 
parallels the treatment of quantum error correcting codes 
in terms of the stabilizer formalism |18| . 

As a final example, consider a graph which consists 
of seven vertices of a cube. The graph states associated 
with such a graph are equivalent, up to local unitaries, 
to the codewords of the seven-qubit Steane code ([7, 1, 3] 
CSS code). The graphs associated with these examples 
are illustrated in Fig. ^ 



C. Useful properties of graph states 

For any fixed graph Q one can verify a number of use- 
ful relations between graph states following from Eq.(J2|. 
For any vertex j we divide the vertices into three distinct 
sets: vertex j, the set Nj which contains all neighboring 




(b) 



(c) 







FIG. 1: Graphs with N — 7 corresponding to (a) GHZ state, 
(b) linear cluster state and (c) seven qubit steane code. 



vertices of j, i.e. all vertices connected to j, Nj = {k S 
€ E}, and the set Rj which contains the re- 
maining vertices. We use the corresponding multindices 
(J-Nj i fJ-Rj and the index jij to label the graph states, 
where fi Nj = fi kl fi k2 ■ ■ ■ fJ-k ]Njl , PR, = MhM* 2 ■ • ■ fH iRj \ 
with {ki,j} e E, {ii, j} £ E. One readily verifies that 
for each j the following relations are fulfilled 



= I* 



(7) 



4 j) \*H^*i) = (-l)*l*Wi«r,M*,>> ( g ) 

oP^Hl**,**,) = »(-l)^l*^A^#*^>. ( 9 ) 

where p,^ — p,k 1 ftk 2 ■ ■ ■ fik lN . denotes the bitwise com- 
plement with 0=1,1 = 0. Eq. J7J) implies that 



I*, 



,)=af<... t rri*oo...o), (10) 



where a z = 1. This property follows from the eigenvalue 
equations Eq. (J2J, while Eq. ||8J follows from 

\ L ) u z u z ■■■< J z I ^fijlANj HRj I 

= (-1) W I* W A W >- f 11 ) 



Finally, to prove Eq. @ one uses that a 
together with Eqs. lf7IS)l . 



D. Local equivalence of graph states 

While different multiparticle entangled graph states 
are associated with different graphs, it is not obvious that 
states arising from different "interaction" graphs lead to 
states with different entanglement properties. In fact, 
it turns out that local unitary operations allow one to 
change from some graph state to some other. The classi- 
fication of graph states into subclasses that are invariant 
under local unitary transformations is a complex prob- 
lem, which is not solved in general. Progress among these 
lines is reported in Refs. (l3.l20| . We emphazise that the 
results we obtain below for certain graph states, in partic- 
ular for all two-colorable graph states, are also valid for 
graph states which are local unitary equivalent to these 
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graphs. This implies that the entanglement purification 
protocols discussed below are applicable to some graph 
states which do not arise from a two-colorable graph. For 
instance, the GHZ-state discussed in Sec. IIIBI associated 
with a graph with edges {1, /c}Vfc is local unitary equiva- 
lent to a state associated with the fully connected graph, 
i.e. with edges {k,l},Vk < I. While the first graph is 
clearly two-colorable, the second is not. 

E. Mixed states and depolarization 

Let us now consider an arbitrary graph Q with N ver- 
tices V = {Vx, V2, ■ ■ ■ , Vjsr}, and N spatially distinct par- 
ties each holding one of the N particles belonging to a 
general mixed state p. We consider the TV-particle graph 
states {|* AllAl2 ... AlJV )g} associated to Q and introduce the 
multi-index (j, = p>xp,2 ■ ■ ■ Hn- Since these states form a 
basis in H the density operator p can be expressed as 

pEVI*^(*4 (12) 

In the following, we will show that one can depolarize p 
to a state pg which is diagonal in the graph state basis by 
a sequence of local operations and classical communica- 
tion (i.e. operations acting on each particle individually), 
without changing the diagonal coefficients. That is, given 
p (Eq. I|12[)) one can create by means of local operations 
and classical communication the state 

with A M = A M)M . 

This can easily be seen using the eigenvalue equation 
Eq. J5J). Consider two graph states ("J^^...^) and 
\^uiv 2 ...u N ) which differ in at least one bit, say the first 
pi = while i/i = l. We have that -?GJ ^0^2 ■■■/-'«) = 
(+1)|*0m2...m«> and ifil*!^...^) = (-1)1*1^...^). 
Note that the operation corresponding to K\ is local, i.e. 
involves only operations on individual particles. If the 
parties thus jointly perform with probability p — 1/2 the 
operations corresponding to Ki, while with probability 
p = 1/2 the state is left untouched, the resulting density 
operator p — 1/2 (p + K\pK\) will have no off diagonal 
elements of the form \^o l _ l2 ...^ LN ){'^iv 2 ... VN \, while the di- 
agonal elements remain unchanged. In a similar way, all 
off diagonal elements can be eliminated in a total of N 
rounds by probabilistically applying the local operations 
corresponding to Kj, j = 1, 2, . . . , N to the state result- 
ing from the previous round. 

In summary, for any graph one can depolarize the state 
p to a mixed state pg diagonal in the associated graph 
state basis. The corresponding sequence of (probabilis- 
tic) local operations is determined by the correlation op- 
erators Kj associated with the graph Q. This ensures 
that we can restrict ourselves to mixed states diagonal in 
the graph state basis in the following analysis. 



III. MULTIPARTICLE ENTANGLEMENT 
PURIFICATION PROTOCOLS 

In the following, we will analyze in detail the multi- 
particle entanglement purification protocol introduced in 
Ref. 14]. This protocol is a recurrence-like scheme which 
operates on two copies of a given state simultaneously 
and may be viewed as a generalization of the purification 
protocol for GHZ states introduced in Ref. [lj to arbi- 
trary two-colorable graph states. We will also introduce 
a multi-party hashing protocol — based on the protocol 
presented in Ref. ^| for GHZ states — , where joint ma- 
nipulations of a large number of copies are involved. In 
both cases, the goal is to produce few states with high 
fidelity from a large number of states with low fidelity. 
While the first protocol is particularly useful to purify 
states of low fidelity, the second protocol turns out to be 
very efficient for states sufficiently close to the desired 
output state. We investigate the conditions under which 
the protocols can be applied and also discuss their effi- 
ciencies. 

In the following, we consider an arbitrary but fixed 
two-colorable graph Q with vertices V = V A U Vb, 
N A ee \V A \,N B = \V B \ and N = N A + N B spatially 
distinct parties each holding one of the N particles that 
belong to a general mixed state p. Using the depolariza- 
tion procedure discussed in the previous section, we can 
transform the state p to a standard form diagonal in the 
associated graph state basis, without changing the diag- 
onal coefficients. That is, without loss of generality, we 
can consider mixed states p diagonal in the graph-state 
basis 

P= J2 Va,mbI*ma,mb>(*ma,mbI- (14) 

A*a,Mb 

We have introduced the shorthand notation /xa = 
Pi t Pi 2 ■ ■ ■ ^in a f° r au eigenvalues associated with the ver- 
tices in the set V A , and similar for /xb- We assume that 
the parties share M copies of this TV-particle mixed state 
p. In the following we establish for every two-colorable 
graph Q a local purification protocol which is capable 
of creating the pure state |^o)e as output state, given 
the initial state p fulfills certain requirements (e.g. has 
sufficiently high fidelity). Note that we have used the 
shorthand notation ee 00. . .0, i.e. | v I / o)g = | x f'oo...o)e- 



A. Recurrence scheme 

In this section we review the purification protocol in- 
troduced in Ref. and analyze its properties. Wc 
consider two sub-protocols, PI and P2, each of which 
acts on two identical copies p\ = P2 = p, P12 = Pi ® P2- 
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1. Protocol PI 

In a first step, all parties which belong to the set Va 
apply local CNOT operations |2J to their particles, with 
the particle belonging to p 2 as source, p\ as target. Sim- 
ilarly, all parties belonging to set Vb apply local CNOT 
operations to their particles, but with the particle be- 
longing to px as source, pi as target. Making use of the 
properties of graph states, pointed out in Sec. Ill CI to- 
gether with 

CNOT = 1/2(1® l + o-s <g> 1 + 1® a x - a z (g>a x ), (15) 

one readily checks that the action of such a multilateral 
CNOT operations is given by 

|*MA,I»b)I*«A,«<b) -» l*MA, f »Bffi«B>I^AffiMA,« B ) (16) 

where fi\ © va denotes bitwise addition modulo 2. For 
instance, if fi = P1P2P5, MAffi^A = Pi © v\, P2 ©^2, Ms © 

The second step of protocol PI consists of a measure- 
ment of all particles of P2, thereby destroying one of the 
two copies of the initial state. The particles belonging 
to set Va are measured in the eigenbasis {|0) x , |l) x } of 
a x , while particles belonging to set Vb are measured in 
the eigenbasis {|0) 2 ,|1) 2 } of a z . The measurements in 
sets Va [Vb] yield results (— 1)^' [(— 1)^] respectively, 
with £,j,Ck € {0,1}- If the measurement outcomes ful- 
fill (£7 + J2{k,j}&E Cfc)mod2 = Vj — which implies 
Ma © vk = — the first state is kept. Otherwise, also 
the first state is discarded and protocol PI failed. In case 
the resulting state p is kept, one finds that it is again di- 
agonal in the graph-state basis, with new coefficients 

{ (^b , Mb ) I ®Mb =fB } 

where K is a normalization constant such that tr(p) = 1 
indicating the probability of success of the protocol. We 
note that one may also keep measurement outcomes other 
than (£j + J2{k j}eE 0c) m °d2 = Vj which would in- 
crease the success probability of the protocol. In this 
case, however, it is not clear whether the modified pro- 
tocol is still capable of purifying the desired state. 

2. Protocol P2 

Protocol P2 is defined in a similar way and can be 
obtained from protocol PI by exchanging the roles of 
sets Va and Vb- The action of the multilateral CNOT 
operation is in this case given by 

). (18) 

which leads to new coefficients 

^7A:7b = 7^ : '^a,7'b / Va,7'b> (19) 

{(fA,A'A)|^A©MA=7'A} 

for the case in which the protocol P2 was successful. 



3. Total purification protocol 

The total entanglement purification protocol is com- 
posed of PI and P2. It consist in an iterative application 
of sub-protocols PI and P2, always using two identical 
copies, obtained in the previous round, as input states. 
It turns out that for certain input states the convergence 
of the protocol as well as the purification regime can be 
improved by using an adaptive scheme. That is, instead 
of using a strictly alternating application of protocols PI 
and P2, one allows for two (or more) subsequent appli- 
cation of the same protocol and may use arbitrary se- 
quences such as PI - PI - PI - P2 - PI - P2 - P2- 
etc. 

We remark that the basic idea of the protocol is sim- 
ilar to the standard recurrence protocols [H E3 for the 
purification of Bell states. Information about the first 
state p\ is transferred to the second state P2 by means of 
the multilateral CNOT operations and revealed by the 
measurement. The gain in information about the first 
state eventually corresponds to an increase of the entan- 
glement of this state. This information transfer becomes 
evident from Eq. I|ltj|) , where we remark that the relevant 
information is encoded in /xa,Mb- One sees that while 
protocol PI is capable to reveal information about /xa, 
the protocol P2 reveals information about tie- In case 
of a successful purification, the typical action of the to- 
tal protocol is as follows: The protocol PI increase the 
weight of all coefficients Ao,^ B , while P2 amplifies coef- 
ficients A^ Ai o- In total, this leads to the amplification of 
Ao,o- 

4- Binary-like mixtures 

To gain some analytical insight into this procedure, we 
consider the example of mixed states of the form 

|*ma,o><*ma,o|. (20) 

MA 

These states arise in a (hypothetical) scenario were all 
particles within set Va are only subjected to phase flip 
errors (described by a z ), while all particles within set 
Vb are subjected to bit flip errors (<r x ), which can also 
be described as a collection of phase flip errors in set 
Va (see Sec. Ill C|l . We remark that this situation is 
equivalent to a more natural scenario where only phase 
flip errors occur on all locations and one considers a state 
which is up to local unitary operations equivalent to pa- 
Such a situation may for instance occur when each of the 
particles of a perfect TCGS is subjected to decoherence 
described by a dephasing quantum channel. 

From the discussion in the previous section, it is clear 
that the iterative application of protocol PI is sufficient 
to purify states of the form Eq. I|2U|I , as only information 
about pa has to be extracted. A single application of 
protocol PI leads again to a state of the form pa, with 
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new coefficients 

W - ^ Ai0 /jr, (21) 

where = A?, . n is a normalization constant which 
gives the probability of success of the protocol. That 
is, the largest coefficient is amplified with respect to 
the other ones. It follows that iteration of the pro- 
tocol allows one to produce pure graph states l^o.o) 
with arbitrary high accuracy, given the coefficient Ao,o 
is larger than all other coefficients A^^o- That is, the 
condition that successful purification is possible reads 
Ao : o > A AtA: oV/iA 7^ 0. If this conditions is fulfilled, 
the protocol converges towards the attracting fixed point 
given by Ao.o = 1- If not, we choose the largest coeffi- 
cient, say A MAj O) and map it onto Ao,o via local unitary 
operations. We remark that the family of states pa in- 
cludes states up to rank 2 Na , which — depending on the 
corresponding graph — can be as high as 2 N ~ 1 . 

As a concrete example, consider the one parameter 
family p A (F) with A ,o = F, A MA , = (1 - F)/(2 Na - 1) 
for ha 7^ 0, where F is the fidelity of the desired state. 
Application of protocol PI keeps the structure of those 
states and leads to 

F 2 

F= F 2 + (1-F) 2 /(2 Na -1)' (22) 

This map has F = 1 as attracting fixed point for F > 
1/2 Na . The probability of success for a single step is 
given by p = F 2 + (1 - F) 2 /(2 Na - 1). 



5. Purification regime and convergence 

While for the restricted family of states pa discussed 
in the previous section an analytic treatment of the pro- 
tocol is possible, the situation is more complicated in 
the general case. For full rank mixed states, an iterative 
application of both protocols, PI and P2, is required to 
reveal information about fij^ and /xb respectively. In this 
case, the action of each protocol is described by a more 
complicated non-linear mapping (see Eqs. I|17ll9f) ) of a 
large number of independent variables (in total 2 —1) 
which makes an analytic treatment of the protocol very 
difficult. We have not been able to determine boundaries 
of the purification regime and the convergence proper- 
ties of the protocol analytically in the general case. For 
a large family of states, arising from different noise mod- 
els, we have however investigated the purification regime 
and convergence properties numerically. 

As a first example, we consider noisy TCGS arising 
naturally in a multiparty communication scenario where 
each of the N particles constituting \^f ) is sent through a 
noisy quantum channel. We consider depolarizing chan- 
nels with noise parameter q described by 

£ k p = qp+(l-q)/21 k ®tr k (p), (23) 



where the channel is acting on particle k. The resulting 
multipartite state is of the form 

p{q)=£ x £ 2 ...£ N \* Q ){y \. (24) 

We point out that q = 1 corresponds to perfect trans- 
mission, i.e. no decoherence, while q = leads to a 
completely depolarized state. We have numerically in- 
vestigated the threshold value g m i n until which our mul- 
tiparticlc entanglement purification protocol can be suc- 
cessfully applied. For q > g m i n , we have that the pu- 
rification protocol can be successfully applied, while for 
q < 9min the protocol fails. The results of this numerical 
investigation are summarized in Fig. [21 for linear cluster 
states and GHZ states of different size. While for lin- 
ear cluster states one observes that the threshold value 
^min is essentially independent of the number of particles 
N, the situation for GHZ states is different. For GHZ 
states the threshold value g m i n increases with the num- 
ber of qubits. That is, the tolerable amount of white 
noise per particles decreases with increasing N and thus 
it becomes more difficult to purify large scale GHZ states. 
We have also analyzed other two-colorable graph states 
and found that the threshold value does in general not 
depend on the size of the system N, but is determined 
by the maximal degree of the corresponding graph. For 
specific families of states, the degree of the graph may 
however depend on the number of vertices. An example 
is given by the iV-particle GHZ state, where the degree 
of the corresponding graph is N— 1, i.e. the degree scales 
with the size of the system. Indeed, it can be shown an- 
alytically [2^ that the value of q such that GHZ states 
become non-distillabe (by any protocol) increases with 
increasing N. For families of graph states of fixed degree 
and arbitrary size, however, one can show that the states 
remain distillable if q > g c rit! where g cr it only depends 
on the degree of the graph. This different behavior can 
be intuitively understood as follows: Consider only bit 
flip errors described by a x . If the degree of the graph 
is high, a certain vertex is connected to a large number 
of neighboring vertices. Whenever a bit flip error in one 
of the neighboring vertices occurs, this is equivalent to a 
phase flip error (described by a z ) at the vertex in ques- 
tion as can be seen from the discussion in Sec. Ill CI That 
is, a large number of independent errors affect a single 
vertex (and thus a specific index pj) and these errors 
accumulate, leading to a threshold value increasing with 
the degree of the graph [2^. We remark that whenever 
q > <7min, our protocol successfully converges towards the 
fixed point specified by Ao.o = 1. 

Note that the different behavior of GHZ states and 
graph states with fixed degree is not reflected by the min- 
imal required fidelity F min = ( v I / o,o|p(gmin)|*o,o) which 
is in both cases decreasing exponentially with the size of 
the system N. For linear cluster states and GHZ states, 
F m i n is plotted in Fig. for different number of parti- 
cles N. These observations suggest that the fidelity is 
for multiparticle system not a very sensitive measure to 
judge properties of multiparticle entangled states in the 



7 



presence of decoherence. From the exponential decrease 
of the minimal required fidelity, one would be tempted 
to conclude that the requirement to purify states become 
less stringent with increasing size of the system. This is 
however certainly not true, as the tolerable amount of 
white noise per particle may even decrease with the size 
of the system, e.g. for GHZ states. 
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FIG. 2: (a): Minimal value of fidelity F m j n + [o] and pa- 
rameter q m in x [*] for linear cluster states [GHZ states] for 
different number of particles N and perfect local operations. 

We have also considered mixed states of the form 

p{x)=x\* )(9 \ + (l-x)/2 If l, (25) 

i.e. mixtures of the desired state with a completely de- 
polarized state. We observe that the situation is sim- 
ilar as in the case of local white noise, i.e. F m i n = 
Xmin + (1 — ^min)/2 Ar decreases exponentially with N. For 
% > x m in, the protocol successfully converges and pro- 
duces perfect two-colorable graph states. The threshold 
value F m ; n is plotted for linear cluster states of different 
size in Fig. For n — 2 and n = 3, the minimum 
required fidelity coincides with the values found for the 
purification of GHZ-states [l^- The reason for this co- 
incidence is that the two- and tree-party linear cluster 
states are (up to local unitary operations) equal to two- 
and tree-qubit GHZ states, and that the cluster purifi- 
cation protocol is (in these two cases) equivalent to the 
GHZ purification protocol. 

For more general states, the purification regimes as 
well as the convergence of the protocol is difficult to de- 
termine due to the large number of parameters. 

6. Efficiency and yield 

The recurrence scheme presented in the previous sec- 
tion is capable of purifying a large class of possible input 
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FIG. 3: The required initial fidelity for linear cluster states 
as a function of the number N of parties. The dotted curve 
is an exponential fit to the exact values (circles). 



states. As in the bipartite case, however, the protocol 
approaches unit fidelity (and thus successful perfect dis- 
tillation) only in the asymptotic limit, i.e. a large number 
of iterations of the protocol is required. Since any step of 
the protocol only succeeds with certain probability, and 
in addition one pair is consumed in each step regardless 
of the measurement outcomes, the recurrence protocol 
has — strictly speaking — zero yield. Here, the yield of 
the protocol is defined as the number of copies of the 
state which are, on average, required to produce a single 
copy of the desired (pure) output state. For practical 
purposes it is often sufficient to produce output states 
with a fidelity larger than a certain threshold value and 
thus a finite, possibly small number of iteration steps 
suffices. The efficiency of the procedure achieving this 
task can be easily evaluated. For a single iteration of the 
entanglement purification protocol one obtains that the 
average number of copies required to obtain a single copy 
of the output state is given by 2/K, where K is the prob- 
ability of success of the protocol (see e.g. Eq. (|17|l for 
protocol PI). The efficiency of this purification step is 
thus given by K/2. Note that if the fidelity of the initial 
state approaches unity, we have that K — > 1. The yield 
of the total procedure is obtained by multiplying the ef- 
ficiencies of the individual purification steps. In Sec. I VII 
the efficiency of multiparticlc entanglement purification 
protocol will be compared to the efficiency of protocols 
based on bipartite entanglement purification. 

We remark that the yield of the purification protocol 
decreases (exponentially) with the number of parties N, 
as the probability of success for each purification step, 
K (see e.g. Eq. (JT7J) , decreases with N. To overcome 
practical difficulties for states consisting of large num- 
ber of particles (where the success probability may be 
very small), it is possible to use an alternative purifica- 
tion method which essentially consists in a cut and re- 
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connect procedure. That is, a given TCGS is split up by 
means of local measurements into several (smaller) sub- 
graph states. These sub-graph states are then purified 
independently and finally these sub-graph states are re- 
connected. Since the sub-graphs are smaller, the yield 
for the purification of each sub-graph state is higher. The 
re-connection is deterministic and may e.g. be performed 
by means of Bell-type measurements, where sub-graphs 
are chosen in such a way that each of them is itself a 
two-colorable graph (and hence distillable by our pro- 
tocol) and the sub-graphs overlap at the re-connection 
points (so that the Bell-type measurements are in fact lo- 
cal operations). As several (non-overlapping) sub-graph 
states can be produced from a single copy of the initial 
graph state, the yield of the total procedure is essentially 
determined by the yield to purify the sub-graph states. 
Extremal cases of this procedure are on the one hand the 
purification of pairs and creation of the required target 
state by means of teleportation and on the other hand 
direct multiparty purification, each of which having its 
own advantages and disadvantages. The optimal choice 
of the size of the subgraph will depend on the required 
task. Optimization can be performed with respect to the 
yield, the achievable fidelity and the purification regime 
and will be treated elsewhere. 



B. Hashing and breeding 

It is interesting from a principal point of view to ob- 
tain purification protocols which have non-zero yield. In 
the bipartite case, the hashing and breeding protocol (see 
Ref. [1(1) achieve this aim. In these protocols, the local 
operators act jointly on a large number M of copies of an 
initial state p, where M — ► oo. In brief, they use entan- 
glement — either present in pure form (breeding) or in 
noisy form (hashing) — to reveal (non-local) information 
about p® M . This information gain results in purification 
of a certain subensamble of M' copies. The yield in the 
case of hashing is given by M'/M, while in the case of 
breeding one has to take into account that entangled pure 
states consumed during the purification procedure have 
to be given back. 

The hashing protocol has been generalized by Maneva 
and Smolin [lj] to a multipartite setting. They showed 
that certain multiparty entangled states, namely GHZ 
states, can be purified. To be specific, the protocol in- 
troduced in Ref. 0] allows one to purify states diagonal 
in the basis of GHZ states with a non-zero yield, pro- 
vided the initial fidelity of the state is sufficiently high. 
In this section, we will show that the hashing protocol of 
Maneva and Smolin can be generalized to purify a much 
larger class of possible output states. In particular, we 
will present for each two colorable graph state a protocol 
which is capable to produce this graph state as an output 
state with non-zero yield, provided the initial fidelity is 
sufficiently high. The main point is to realize that the 
stabilizer formalism used in Ref. 13] to construct a pu- 



rification protocol for GHZ states can be applied in a 
similar way to two-colorable graph states. In fact, Eqs. 
(|16I18|I which describe the action of certain multilateral 
CNOT operations on two graph states already show how 
information about an unknown graph state can be trans- 
ferred from one copy to another. This information can 
be revealed by measurements. In particular, the whole 
bit string /xa of a single copy of a two-colorable graph 
state I^a.^b) can be obtained by performing a local 
measurement in the eigenbasis of o~ x of all particles in 
set Vai while all particles in set Vb are measured in the 
eigenbasis of a z . The measurements in sets Va [Vb] yield 
results (-1)^ [(-f) a ] respectively, with ^,( k £ {0,1}. 
The value of the bit fij, j € Va is given by 



N = I & + E 



Cfc mod2, 



(26) 



which follows from the eigenvalue equation Eq. J2J) . That 
is, the measurements allow one to simultaneously deter- 
mine the eigenvalues of all correlation operators Kj for 
j G Va- In a similar way, by exchanging the role of Va 
and Vb, one can obtain the bit string /xb- Note, how- 
ever, that bit strings //a and /xb can not be determined 
simultaneously by local measurements. 

Given these tools, the hashing (and Breeding) protocol 
can now be implemented in the usual manner. That is, 
given M copies of a mixed state p diagonal in the graph 
state basis (which can always be achieved by applying 
the depolarization procedure described in Sec. Ill Ell 



P = 



E 



Va,/1B I^MA.Mb) (^MAjMB I 



(27) 



one chooses a random subset of to copies and determines 
the parity of each bit fj,j . This can be accomplished by 
applying multilateral CNOT operations between the first 
to — 1 copies of the set and the m th copy. The correspond- 
ing measurement of the m th copy allows to determine the 
parity of the whole bit string /xa of the to — 1 remain- 
ing copies. The procedure is repeated for many of these 
randomly chosen subsets and in a similar way the parity 
of /xb is determined for other random subsets. It is now 
straightforward to calculate the number of required rep- 
etitions of the above procedure to determine completely 
all relevant information of the remaining copies. To this 



aim, we define the coefficients cla ,Oa as follows: 



E 



(28) 



For instance, for TV 
\ (i) 



3 we have that a\ 



(0) 



= Sfc i ^ikl while a 



(0) _ 



Ev- Aijo and 



= 1. The entropy S(a 



(°) „W 



) is given by 



(0) „(X)s _ 



.(0) 



log 2 a) 



(0) 



(29) 



9 



and determines the number of copies which has to be 
measured in order to obtain bit jij. Following the rea- 
soning of Refs. we can now determine the yield 
of the hashing protocol and find 



D = 1 — max 



■jev A 



[{S(a 



(°) J 1 ) 



max fee y B [{5(a^. 0) ,4 1) 



)}] 

)}] 



(30) 



For mixed states of the form Eq. (|25|l . that are mixtures 
of a pure graph state with the maximally mixed state, 

we have that af ] = (1 + x)/2,af ] = (1 - x)/2Vj. The 
yield of the protocol is in this case given by 



D = 1 - 25 



1 + x 1 



(31) 



Note that the yield of the hashing protocol approaches 
one for any state diagonal in the graph state basis which 
fulfills Ao — ► 1, independent of the specific form of the 
state. In particular, this implies that if a given mixed 
state has sufficiently high fidelity F, the hashing protocol 
(combined with the depolarization procedure) allows one 
to extract pure two-colorable graph states with non-zero 
yield, and the yield approaches one for F — > 1. 



IV. IMPERFECT LOCAL OPERATIONS 

Until now, we have assumed that local operations — in 
particular CNOT operations — are perfect. In practice, 
however, these operations as well as measurements will 
be imperfect. We now investigate the influence of errors 
in the local operations on the multiparticle entanglement 
purification protocol. We will consider an error model 
where imperfect local two-qubit operations are described 
by the completely positive map 



£ u jk P = U jk [£j£ k p}uL, 



(32) 



where Ek , £j are given by Eq. J23J) with error parame- 
ter p. That is, an imperfect operation is described by 
first applying local white noise with probability (1 — p) 
independently on the qubits, followed by the perfect uni- 
tary operation. Such an error model allows us to an- 
alyze the protocol up to N — 13, involving 2N = 26 
qubits. For smaller number of particles, we have also 
investigated more general error models, e.g. two-qubit 
correlated white noise, and also errors in the measure- 
ment process, observing essentially the same behavior as 
for this simple model. 

We have numerically investigated the dependence of 
the minimal required fidelity and the maximal reachable 
fidelity for linear cluster states of different length on er- 
ror parameters p (see Fig. 0}. We remark that whenever 
the fidelity of the initial state (which is obtained from a 
perfect cluster state by applying local white noise with 
a certain noise parameter) fulfills F m { n < F < F max , the 
entanglement purification protocol converges towards a 



state with F = Finax- That is, for any given error param- 
eter p, F m i n and F max determine the purification regime 
where our protocol can be successfully applied in order 
to increase the fidelity of the state. As can be seen from 
Fig. f4J the purification regime becomes broader with in- 
creasing N. In particular, the minimal value of p such 
that a finite purification regime remains, i.e. the thresh- 
old value p m i n until which our MEPP can be successfully 
applied, is (almost) independent of the number of parties 
TV which can be seen from Fig. |3J It even seems that for 
larger number of particles the tolerable amount of noise 
per operation is larger. Performing a similar investiga- 
tion for GHZ states, we find on the contrary that the 
threshold value p mi n increases with increasing N (Fig. 

i.e. it becomes more difficult to purify GHZ states 
with a large number of particles N. 




0.94 0.96 0.98 
Error parameter p 



FIG. 4: Maximal reachable fidelity F ma x and minimal re- 
quired fidelity F m i n plotted against error parameter p (lo- 
cal operations) for density operators arising from single-qubit 
white noise. Curves from top to bottom correspond to linear 
cluster states with N = 2,4, 6, 8, 10 particles. 



V. PURIFICATION REGIME FOR 
BINARY-LIKE MIXTURES 

As in the case of perfect local control operations, it 
is possible to treat binary-like mixtures pa of the form 
Eq. (|20|l analytically when considering a restricted error 
model which keeps the structure of these states. Note 
that considering such an error model with this restricted 
kind of errors allows one to obtain a lower bound on the 
threshold value for more general error models. To this 
aim, we consider the completely positive map (CPM) A4j 
given by 



Mjp = pp 



1-p 



(P- 



4V^), 



(33) 
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FIG. 5: Threshold value for errors in local operations p m i n 
for GHZ states (*) and linear cluster states (x) with different 
number of particles N. 



which correspond to a bit-flip channel acting on qubit 
j. We model imperfect local unitary operations by the 
following CPM 



£u ih P = U jk [M j Mkp]U] l 



(34) 



where Aij is given by Eq. (|33[l if qubit j belongs to 
the set Vb, and the identity otherwise. That is, we as- 
sume that operations on particles in set Va arc perfect, 
while an imperfect unitary operation acting on two qubits 
held by a party in set Vb is described by first applying a 
probabilistic bit-flip channel on the qubits, followed by 
the ideal unitary operation. Such an error model ensures 
that the structure of binary-like mixtures (Eq. j5Q|| ) is 
maintained. In principle, one could in addition also con- 
sider phase flip errors for all particles in set Va — which 
would still maintain the structure of binary mixtures — , 
however the analysis is more complex and no additional 
insight is gained. 

In the following, we will investigate the purification 
regime for GHZ states and closed linear cluster states, 
initially of the form pa(F). That is, we will determine 
the threshold value p cr it until which a single instance of 
our purification protocol allows one to increase the qual- 
ity of the state. While we find that for closed linear 
cluster states the threshold value p cr it essentially remains 
constant, independent of the size of the system, for GHZ 
states we show that even for this restricted kind of errors, 
the threshold value increases with TV, approaching 1 in 
the limit of large N. This implies that purification of 
GHZ states with large number of particles becomes ex- 
ceedingly difficult with increasing N. In the limit of large 
N, nearly noiseless local operations are required. On the 
contrary, the requirements on local operations for the pu- 
rification of cluster states is independent of the number 
of particles N. 



We start by investigating the properties of binary- 
like mixtures of GHZ states. Recall that the corre- 
sponding graph of a GHZ state is given by edges {1, k}, 
k e {2, 3, . . . , N} and V A = {V}, V B = {V 2 ,V 3 , . . . , V N }. 
We consider states of the form 



p A (x) = i|*o,o>(*o,o| + (1 - x)/21 Va , 



(35) 



where ^Va = . |*o,o)(*o,o| + |^i,o)(*i,o|- As pointed out 
in Sec. Ijll Cfl . the action of a bit flip error a x on any 
of the particles 2,3, ...,N on graph states can equiv- 
alently be described by a phase flip error a z on parti- 
cle 1. In particular we have that for j — 2,3, ...,N, 



Mn*o,o)(*o,o| 
also m[ B) 1 Va = 



-- p|*o,o><*o,o| + (1 -p)/21 Ya and 
.„ , . *y A . It readily follows that the ac- 
tion of the purification protocol PI which involves im- 
perfect unitary operations on two copies of the input 
state pa{%) can equivalently be described by the action 
of the perfect protocol PI on two copies of the state 



p A {x>) ee Mf'M 



( B 

A4 N pa{%)- One finds that 



PA(x')=p(xp N - 1 ) 



(36) 



that is the state is still of the form Eq. (|35|) with new 
coefficient x 1 = xp 1 . The action of the perfect protocol 
PI on pa(x') is given by Eq. l(2T)l with A = x' + (1 - 
x')/2,X h0 = {l-x')/2 yielding 

Vo = [xp»- 1 + l ~ X f~ 1 )f/K. (37) 

The purification protocol was successful if the fidelity of 
the resulting state Ao ; o is larger than the one of the initial 
state p(x), F = A ,o = x + (1 — x)/2. That is 



[xp 



N-l I 1-xp' 

J~ 2 



>x+^ 1 (38) 



which can be rewritten as 



2p 



N-l 



1 > x z p 



2 J(JV-l) 



(39) 



On the one hand, for a fixed noise level of local operations 
(given by the error parameter p) Eq. (|3Tj|l allows one to 
obtain the maximal reachable fidelity P max = x max + (1 — 
£max)/2, that is the fixed point of the protocol. One finds 



V /(V^ - i)/p [n - 1) . 



(40) 



On the other hand, one can also determine the threshold 
value for the error parameter p, p cr it, i.e. the minimum 
required reliability of the local operations that purifica- 
tion is possible. For (2p Ar_1 — 1) < 0, the inequality l|39|) 
can certainly not be fulfilled, independent of x. Thus in- 
dependent of the initial quality of the state, the protocol 
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is not capable to increase the fidelity if p < p cr a . A lower 
bound on the threshold value p cr it is thus given by 



Pcrit 



1/(N-1) 



(41) 



which increases for increasing N. That is, even if we con- 
sider only a restricted kind of errors on particles within 
set Vb, the requirements on the quality of local opera- 
tions become more stringent if the number of particles 
N increases. This is in agreement with the numerical re- 
sults found for the more general white noise error model 
discussed in the previous section. 



B. Closed linear cluster states 

We now turn our attention to closed linear cluster 
states of size N = 2M, specified by a graph with N 
vertices and edges {k, (k + l)modA}. The sets Va [Vb] 
are given by all odd [even] vertices respectively. As in 
the case of GHZ states we determine not only the mini- 
mal required and maximal reachable fidelity, but also the 
threshold values for local operations. We find that the 
tolerable amount of noise per imperfect two-qubit op- 
eration essentially remains constant independent of the 
number of particles involved, and is for large N given by 
p crit ss 0.4976. That is, the purification protocol is also 
for large number of particles remarkable robust against 
the influence of imperfect local operations, which is in- 
teresting for possible practical applications. 

We consider density operators of the form 



p A (x) = x|*o,o>(*o,o| 



1 -x. 



(42) 



where 1 Va = S MA I*ma,o)<*ma,o|- We have that pa(x) 
has rank 2 Na = 2 M and the fidelity F of the state with 
respect to |*o,o) is given by F — x + (1 — x)/2 M . For 
simplicity, we will assume M odd in our analysis. A 
similar analysis can be performed for M even. We will 
consider the purification protocol PI, which is sufficient 
to purify these kind of states. We analyze a single in- 
stance of the purification protocol PI and determine the 
conditions under which an increase of the Fidelity F is 
possible. Recall that imperfect local unitary operations 
are modelled by Eq. (|34f> . It turns out to be convenient 
to use the parameter q = (1 +p)/2 to describe the quality 
of imperfect local operations (see Eq. J33J). 

As in the case of GHZ states, the action of the imper- 
fect protocol PI on two copies of the state pa( x ) can be 
equivalently described by the action of the perfect (error 
free) protocol PI on two copies of an input state p\. We 
have that 



p' A = MiM 2 ■ ..MnPa{x), 



(43) 



where M-k is defined in Eq. for k G Vb and is 

given by the identity operation if k G Va- It is rel- 
atively straightforward to determine p' A . Using that 



M.xM.% . . .M-n^Va = ^Vaj ^ only remains to deter- 
mine the action of M1M2 •• -M-n on the cluster state 
|4'o)(^ / o|. Since the action of a x on particle k of a clus- 
ter state can be equivalently described by a z operations 
on the neighboring particles k — 1 and k + 1, we have 
that the resulting state M1M2 ■ ■ ■ ■Mn\^o){^o\ is again 
diagonal in the graph state basis, where only some of 
the coefficients a Mj o are non-zero. A straightforward 
calculation shows that for M odd one obtains a total 
of 2 M ~ 1 non-zero terms with corresponding coefficients 
{a/c}, where < k < (M — l)/2 and «fc appears bu,k 
times, where 



M 
k 



= M\/(k\(M - k)l). 



We have that a.k is given by 

_ ktt \M-k 

a k = q (1 - q) 



(44) 



(45) 



where a corresponds to |$o)(^o|- 

That is, the state p' A is diagonal in the graph state 
basis with coefficients - These coefficients are given 
by 



A', 



x[q k (l-q) 
1-X 



M-k 



„M-fc 



2 M 



M 



)M 



: (46) 
(47) 



where < k < (M — l)/2. Each of the coefficients X' k ap- 
pears bM,k times, while the coefficient \' M appears 2 M_1 
times. Note that Aq corresponds to Aq, i.e. determines 
the fidelity of the state p' A . 

The action of the (perfect) purification protocol PI is 
given by Eq. (|21|l and can be determined straightfor- 
wardly. In particular, the fidelity F of the resulting state 
after a successful purification step is given by 



Ao = M) 2 /r, 



with 



(M-l)/2 

r= ^M, fe (A' fe ) 2 + 2 

k=0 



M-l 



(A' M ) 5 



(48) 



(49) 



The imperfect purification protocol is capable to increase 
the fidelity if A > A , where A = x + (1 - x)/2 M . To 
evaluate the sums appearing in Eq. P^l one only need 
to realize the following identity 



(M-l)/2 

[bM,kq k (l-q) 



+ b M , k <r- k (i-q) 



k=o 



A I 



^6 M , fc 9 fe (l-9) M - fe .(50) 



k=0 



The resulting binomial sums can then be easily evaluated 
and one finds e.g. 



£W fc (i-?) 



2M-2fe 



= (1-9) 



271/ 



k=Q 



A I 



12 



(Af-l)/2 



iM-l 



(51) 



fc=0 



It turns out to be useful to define the functions A 
A(q),B = B(q),C = C(q) given by 

1 



.4 



B 



q M +(l-q) 

1 

2M 



M 



C = (1-q) 



2M 



2 M 



(52) 



M 



-- w + [2q(l - q)} 



M 



After some algebra, one finds that T = x 2 C + B and 
Ao = [xA + B] 2 /T. The condition that a single success- 
ful application of the imperfect purification protocol PI 
leads to an increase of the fidelity is thus given by 



[xA + B} 2 
x 2 C + B 



>x(l-B)+B. 



(53) 



The corresponding purification regime can be determined 
by solving the resulting quadratic equation in x. One 
obtains 



x± 



BC - A 2 ± VA 
C(B- 1) ' 



(54) 



with 



A = (A 2 - BC) 2 + 4C(1 - B)[2AB - B(l - B)]. (55) 

That is, for x_ < x < x+ a successful purification 
(resulting in an increase of the fidelity of the state) 
is possibly. Recall that x_ , x+ are functions of q, so 
Eq. H54|) determines the purification regime for any 
fixed error parameter q — (1 + p)/2. For instance, 
if q = 0.9 a single application of the protocol PI in- 
crease the fidelity F = x + (1 — x)/2 N l 2 in the range 
2 -o.33JV < x < 2 -o.oo<W That ^ for each N there exigtg 

a finite regime where entanglement purification is pos- 
sible. The threshold value g cr it (respectively p C rit) until 
which successful purification is possible for some input 
states can be determined by (numerically) solving the 
polynomial equation A = 0. One finds that the thresh- 
old value <7 cr it [p C rit] slightly varies over N in the interval 
0.7001 < q < 0.7491 and converges for large ./V towards 
g crit w 0.7469 [p crlt « 0.4938] (see Fig. ®). That is, 
independent of the size of the cluster state, the tolerable 
amount of noise for local operations specified by q re- 
mains (approximately) constant and approaches a finite 
value q™ it ^ 1. This is in contrast to the behavior of 
GHZ states but confirms the numerical results found for 
the more general error model of white noise. 



C. Other graph states 

We have also numerically investigated other graph 
states and determined the corresponding threshold value. 
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FIG. 6: Threshold value g cr it for imperfect local operations 
as a function of number of particles M = N/2 for M odd. 



Here we have not only considered a single purification 
step as in the previous subsections, but analyzed the 
convergence of the whole purification procedure. In ad- 
dition to bit flip errors in set Vb , we have also considered 
phase flip errors in set Va here. This error model has 
still the property that states belonging to the family 
(Eq. H2U|0 remain within this family throughout the pro- 
cedure and the purification protocol PI alone is sufficient 
to achieve purification. 

For instance, we considered 2D cluster states corre- 
sponding to 2D lattices of different size. Note that a 
closed cluster state corresponds to periodic boundary 
conditions, while in an open cluster state the qubits at 
the border have fewer neighbors. We have investigated 
2D cluster states which are closed in x direction but open 
on y direction on lattices of size 4x3 and 6x3 and found 

threshold values p^hi^ = 0-764 and P^£ 3 = 0.758. For 
open 2D cluster states with 4x4 and 5 x 3 we find 



(4x4) _ 



— f 5 x 3") — 

p min ' — 0.764 andp^ lin ; = 0.778, while for a completely 



(4x4) 
T ■ 
mm 



0.768. 



closed 4x4 cluster state we have p n 

We have also considered families of graph states G(jv,fe) 
specified by 2 parameters iV and fc, where the number 
of vertices is given by 2N and k specifies the degree 
of the graph. The set Va is given by all odd vertices 
1,3,..., 2N — 1, while the set Vb consists of all even ver- 
tices 2,4,..., 2N. The edges of the graph are given by 
{j, 3 + 1}, {j, J + 3}, ■ • ■ {j, j + 2k- l}Vj odd and the ad- 
dition is understood modulo N. That is, each vertex in 
Va is connected to the next k vertices in Vb- The graph 
is translational invariant and has degree k. 

We find that the threshold value is largely indepen- 
dent of both N and k. For instance, we have for 



G, 



(10,3): G(io,4)i ^(10,5)) ^(10,10) 



G, 



)iG( 



that p n 



0.762. Alto- 



gether, in the investigated regime 3<A<10, 2 < k < 
N we find that the threshold value varies only between 
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0.768 < p min < 0.772. 



VI. BIPARTITE VS. MULTIPARTITE 
ENTANGLEMENT PURIFICATION 
PROTOCOLS 

In this section, we compare direct multiparticle entan- 
glement purification protocols with protocols based on 
bipartite entanglement purification. For a large class of 
states we show: (i) In the case of perfect local opera- 
tions, any protocol based on bipartite entanglement pu- 
rification is less efficient — in terms of the yield — than 
a certain direct multiparticle entanglement purification 
protocol; (ii) In the presence of imperfect local opera- 
tions, direct multiparticle entanglement purification pro- 
tocols can perform better than protocols based on bipar- 
tite entanglement purification. That is, a wider range of 
states can be purified and the achievable fidelity of mul- 
tipartite protocols is higher than with methods based on 
best known |28[ bipartite entanglement purification pro- 
tocols combined with teleportation. While (i) justifies 
and motivates the investigation of multiparticle entan- 
glement purification protocols from a principal point of 
view, (ii) makes thses protocols also interesting from a 
practical point of view. 

In principle, bipartite entanglement purification seems 
to be sufficient to purify also multipartite entangled 
states. For instance, the following method accomplishes 
the desired task: all but two particles of a (noisy) mul- 
tiparticle entangled state are measured and the result- 
ing (noisy) bipartite entangled state is purified, thereby 
creating an (highly) entangled pair shared between two 
parties. This procedure is applied to several such pairs of 
parties, and the resulting pairs of highly entangled states 
can be used (e.g. by means of teleportation) to gener- 
ate the desired multiparticle entangled state with high 
fidelity. However, as we shall see below, such a proce- 
dure may be quite inefficient and it is not obvious that 
all multipartite entangled states which can be purified 
by direct multipartite entanglement purification are also 
purificable using the procedure sketched above. 



A. Noiseless local operations 

In this section wc compare the efficiency of direct mul- 
tiparticle entanglement purification protocols with meth- 
ods based on bipartite entanglement purification. In Ref. 
|l2j . it was shown that in a restricted (but rather natu- 
ral) scenario, where bipartite entanglement purification 
is combined with teleportation, direct multiparticle en- 
tanglement purification is more efficient for purifying TV- 
particle GHZ states. In the scenario considered in Ref. 
[l2j . TV — 2 particles of a single copy of a TV-particle 
entangled mixed state are measured and the resulting 
bipartite entangled mixed state is purified by means of 
a bipartite recurrence protocol. Highly entangled pairs 



of particles shared between different pairs of parties cre- 
ated in this way are then used to generate — by means of 
teleportation — the desired iV-particle GHZ state. To be 
specific, pairs between party 1 and k, k 6 {2, 3, . . . , TV} 
are generated and a GHZ state is e.g. created by teleport- 
ing N — 1 particles of a TV-particle GHZ state, generated 
locally by party 1, to the remaining TV — 1 parties. The 
average number of copies of the initial state p that are 
required to generate GHZ states with a certain fidelity 
turns out to be smaller for direct multiparticle entangle- 
ment purification, thereby indicating that such protocols 
can be more efficient than methods based on bipartite 
entanglement purification. 

However, the scenario considered by Murao et al. in 
Ref. 01 is a restricted one. For instance, it is assumed 
that bipartite entangled states are generated from a sin- 
gle copy of the initial multiparticle state p, and only a sin- 
gle copy of a TV-particle GHZ state is generated from the 
produced bipartite entangled pairs using a specific pro- 
cedure based on teleportation. Furthermore, only a spe- 
cific bipartite entanglement purification protocol is con- 
sidered. We will now show that for a large class of states, 
indeed any method which is at some point based on bi- 
partite entanglement purification is less efficient than di- 
rect multiparticle entanglement purification, e.g. using 
multipartite generalizations of hashing or breeding. We 
emphasize that we do not specify the method how bi- 
partite entanglement purification is employed, nor do we 
restrict ourselves to a specific way of combining the re- 
sulting bipartite entangled pairs to obtain the desired 
(purified) multiparticle entangled state. 

To this aim, we consider the most general method to 
purify multipartite entangled states which is based on 
bipartite entanglement purification. The only assump- 
tion is that at some point some kind of bipartite entan- 
glement purification is used and thus maximally entan- 
gled pairs shared between pairs of parties are generated. 
These pairs are then used to generate (possibly several 
copies) of the desired multiparticle entangled state. We 
allow for joint manipulation of an arbitrary number of 
copies of the state at any point of the procedure, and 
for the most general bipartite entanglement purification 
protocol. Using the asymptotic inequivalence of multi- 
particle GHZ states and singlets, this is already sufficient 
to show that such protocols can be less efficient than e.g. 
multipartite breeding or hashing. 

We start with M copies of a TV-party entangled state 
p, p® M , which are manipulated by means of local op- 
erations and classical communication. This procedure 
involves bipartite entanglement purification and thus re- 
sults in the generation of m^i copies of maximally en- 
tangled pairs in the singlet state \^~}ki shared between 
parties k and I. With help of another sequence of lo- 
cal operations assisted by classical communication these 
pairs are then transformed into M copies of the desired 
multiparticle entangled state |%). The total procedure 
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can be summarized as follows: 

p mi (g) |^-) H ^-|®m w ^ | X )( X |®M. (5 6 ) 
fc<Z 

The yield of this procedure is given by M/M. In the fol- 
lowing, we consider tripartite systems N = 3 and analyze 
the special case where the input state p is pure and in fact 
identical to the desired output state. That is, we consider 
P = IxKxl where \x) is a three-particle GHZ-state, i.e. 
|x) is local unitary equivalent to l/\/2(|000) + | 111)). 

We make use of the following facts which were used 
in Ref. [24| to proof the irreversibility of entanglement 
transformation between singlets and GHZ states: (i) The 
entropy of the reduced density operator with respect to 
system i, / = 1,2,3 can only decrease under local op- 
erations and classical communication; (ii) The average 
increase in the relative entropy of entanglement of the 
system (2 — 3) is smaller or equal than the average de- 
crease in the entanglement of system 1 with the joint 
system (2-3) for any local pro tocol [24J. Note that (ii) is 
valid only for pure states [24J. If we consider a density 
operator <j 12 3 = |^ r )(4 r | corresponding to a pure state 
which is transformed by an arbitrary local protocol to an 
ensemble {pk,& 123} we have that (i) 

S(tri) > 5>*S(cf } ), (57) 

k 

where S(ai) = — tr(oi log 2 (Ji) with the reduced density 
operator with respect to system 1, o\ = ^23(0-123), and 
similar for entropies of reduced density operator with re- 
spect to system 2,3, while (ii) reads 

J2PkE r (4f) - Mm) < S(ax) - Y,PkS(a[ k) ).(58) 

k k 

In these formulas, £7.(023) denotes the relative entropy 
of entanglement of the reduced density operator 023 = 
tri (0-123)) 

E r (a 2 3) = min S , (o-23||P23), (59) 

P23sep 

where the minimum is taken over all separable density 
operators P23 and 

»S'(cr 2 3||p23) = tr (0-23 log 2 C23) - tr(cr 23 log 2 p 23 ), (60) 

is the relative entropy of 023 with respect to a bipartite 
state p23- For a = \x){x\ we have that 5(<7i) = S{<T2) — 
S(a 3 ) = 1, E r (a 2 3) = (since tri(|x)(xl) is separable), 
while e.g. for a = | \J> ) 12 <( ^E' | one finds S(<7\) — S(<J2) = 
l,S(a 3 ) = 0, ^.(0-12) = l,E r (a 13 ) = E r (a 23 ) = and 
similar for singlets shared between parties k, I. 

We apply now Eq. (|57|l to the second part of the 
process (15611 and find + m\3 > M and similar for 
other reduced density operators, i.e. to 12 + to 2 3 > M, 
1^13 + fn-23 > M. Combining these inequalities we obtain 

M< 2/3(mi 2 + mi3 + m 2 3)- (61) 



When applying Eq. (|58|l to the first part of the process 
(|56|l wc obtain to 2 3 < M — — ni\3, or equivalently 

(mi 2 + toi 3 + m 2 3) < M. (62) 

Combining Eqs. H(il|) and (|62|l one finds 

M < 2/3M. (63) 

That is, for input states which are pure GHZ-state, the 
yield of any procedure based on bipartite entanglement 
purification to obtain again GHZ states is less or equal 
than 2/3. This quantifies the amount of irreversability in 
the transformation of GHZ states to singlets and back. 
Clearly, the multipartite entanglement purification pro- 
tocol — which in this case consists of doing nothing — 
has yield one. This already shows that for a certain in- 
put state, direct multiparticle entanglement purification 
is more efficient than any method based on bipartite en- 
tanglement purification. One can however easily prove a 
similar statement for a large class of input states. 

Consider the class of mixed states p which can be ob- 
tained from GHZ-states |x)(xl by a deterministic local 
protocol, i.e. by a sequence of local operations and clas- 
sical communication (LOCC). These states include, for 
instance, density operators of the form 

p(F)=F\ X ){x\ + (l-F)cT, (64) 

where a is either an arbitrary separable density operator 
(e.g. gl) or any (classical) mixture of GHZ-states. 

On the one hand, we have that for all such states the 
yield of any procedure based on bipartite entanglement 
purification to obtain GHZ states is less or equal than 
2/3. One can easily prove this by contradiction. Assume 
that a such a procedure, A4, with yield larger than 2/3 
would exist. In this case, one could first transform initial 
pure GHZ states in a deterministic way by LOCC to the 
state p and apply M. afterwards, thereby obtaining a 
yield for the conversion of GHZ states to GHZ states by 
a protocol based on bipartite entanglement purification 
larger than 2/3. This clearly contradicts Eq. (|63|l . so 
such a procedure is impossible. 

On the other hand, we have that a multiparticle en- 
tanglement purification protocol exists which allows one 
to purify states of the form p(F) with high yield, given F 
is sufficiently large. In particular, a procedure consisting 
of depolarization of p(F) to a GHZ-diagonal state (see 
Sec. Ill E|) leads to a state where the hashing protocol 
introduced in Ref. [Tj| (also discussed in Sec. IIII Bp can 
be successfully applied. The yield of this protocol ex- 
ceeds 2/3 for a wide range of F, in fact approaches one 
for F — > 1. That is, for a large class of input states, di- 
rect multiparticle purification is more efficient than any 
protocol based on bipartite entanglement purification. 

B. Imperfect local operations 

It is also interesting to compare multiparticle entan- 
glement purification protocols with protocols based on 
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bipartite entanglement purification under realistic condi- 
tions, i.e. in the case where also local operations per- 
formed to manipulate entangled states are imperfect and 
give rise to errors. While above argumentation regarding 
the yield is based on the (idealized) assumption of per- 
fect manipulation of an arbitrary large number of copies 
of a given state — and the analysis is performed in full 
generality — , we will be concerned with practically im- 
plementable protocols in this section. That is, we con- 
sider entanglement purification protocols which operate 
in each round of the protocol only on a restricted num- 
ber of copies of the state. We remark here that in the 
presence of imperfect local operations, protocols which 
operate on a large number of states simultaneously are 
very sensitive to errors in local operations, and therefore 
may become impractical anyway. The fact that imper- 
fect local operations are involved in the purification pro- 
cedure necessarily implies that no maximally entangled 
pure states can be created by any entanglement purifi- 
cation protocol and the corresponding yield — defined as 
the average number of maximally entangled pure states 
produced per copy of p — is zero. This suggests to use an 
adopted definition of the yield, e.g. to accept all output 
states which have a fidelity larger than some threshold 
value Fq. As we are only concerned with recurrence like 
entanglement purification protocols throughout this sec- 
tion — which produce only a single copy of a state as 
output — one can directly use the fidelity of this output 
state as criterion whether the protocol has created the 
desired state or not. The yield is then defined as the av- 
erage number of produced states pk per copy of p with 
fidelity larger than Fq, i.e. Fk = (x\p\x) > Fo, where 
|x) is the desired (pure) output state. Note that when 
considering general entanglement purification protocols, 
such a definition might not be adequate as several copies 
of output states might be entangled themselves. Such a 
definition implies that for Fq > -Ffi x , i.e. the desired out- 
put fidelity is larger than the fixed point of the protocol, 
the protocol will have yield 0. 

We compare the recurrence protocol for multiparticle 
entanglement purification discussed in Sec. IHI Al with 
a scheme based on the bipartite entanglement purifica- 
tion protocol introduced in Ref. 0). In the latter case, 
the protocol of Ref. 0] is first used to create bipartite 
entangled states, which are then used to create a mul- 
tiparticle entangled state by some means, e.g. by tele- 
portation. As we are interested only in the properties 
of the entanglement purification protocol, we have not 
specified the means how bipartite entangled states are 
combined to create a multiparticle entangled state. We 
have rather conservatively assumed that this process — 
although it necessarily involves joint local operations on 
two qubits which may again be imperfect — is error free, 
and the only source of errors results from the fact that 
no maximally entangled bipartite states can be created 
in the case of imperfect local operations. The achiev- 
able fidelity of the states is specified by the fixed point 
of the purification protocol, and is thus independent of 



the input state. That is, our analysis is valid for all (dis- 
tillable) input states under this protocol. Note that the 
protocol of Ref. is the up to now best known bipar- 
tite entanglement purification protocol with respect to 
the maximal reachable fidelity for a given noise level of 
imperfect local operations. 

For instance, if GHZ states with N = 3 particles 
should be created, this involves at least two bipartite 
entangled states, e.g. shared between parties A and 
B [A and C] respectively. The mixed state pab cor- 
responding to the fixed point of the bipartite entangle- 
ment purification of Ref. is diagonal in the Bell- 
basis and can be described by Mb(\$ + )ab(& + \) with 
|$+) = l/\/2(|00) + 1 1 1) ) , where Mb is a map acting on 
B only. A similar description exists for pac i n terms of a 
map M.c acting on C only. The optimal case is that local 
operations in A introduce no further errors and create out 
of two maximally entangled bipartite states a GHZ state. 
Since Mbi-Mc commute with all operations performed 
at A, the fidelity of the resulting state is upper bounded 
by the fidelity of the state M B oM c {\GHZ) A bc(GHZ\). 
We have compared the maximal reachable fidelity F^ x 
for our multiparticle entanglement purification with the 
upper bound for the method based on bipartite entan- 
glement purification described above and observed that 
-F^ax is considerable larger as can be seen in Fig. 
This implies that under realistic conditions, i.e. when 
considering imperfect local operations, direct multipar- 
ticle entanglement purification schemes are advanteous 
as compared to schemes based on bipartite entanglement 
purification. In particular, if the given goal is to pro- 
duce multiparticle entangled states with a given fidelity, 
this can be achievable using multiparticle purification, 
while the scheme based on bipartite purification fails to 
perform this task. That is, the yield of the multipartite 
protocol is nonzero, while the yield of the scheme based 
on bipartite entanglement purification is zero. Note that 
also in regimes where both schemes have non-zero yield, 
direct multipartite purification performs better than the 
scheme based on bipartite purification |T^ . 

If one considers the restricted scenario where a sin- 
gle copy of a multiparticle mixed state is manipulated 
to create bipartite states by means of measurements per- 
formed on the remaining particle, it might also happen 
that the bipartite state created in such a way is no longer 
(distillable) entangled, although the initial multiparticle 
state can be distilled by the multiparticle recurrence pro- 
tocol 01 • That is, for these input states the yield for any 
such scheme based on bipartite entanglement purification 
is zero, while the multipartite entanglement purification 
protocol has non-zero yield. This is e.g. the case for 
three-qubit input states of the form 

p{x) =x\GHZ){GHZ\ + (l-x)/81 (65) 

with 1/5 < x < 1/3. Any measurement performed by 
one of the parties on the state p(x) produces a bipar- 
tite state of the form a{x) = x'|$)($| + (1 - x')/41 with 
x' = x. It can easily be checked that a{x) is separable for 
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x < 1/3, while p(x) is (distillable) entangled for x > 1/5 
if one allows for multiparticle entanglement purification. 
That is, the minimal required fidelity such that a (re- 
stricted) scheme based on bipartite purification can be 
successfully applied is larger than the one for schemes 
based on multipartite entanglement purification. 




0.65 
0.6 

0.94 0.95 0.96 0.97 0.98 0.99 1 

Error parameter p 

FIG. 7: Achievable fidelity of a linear cluster state with N = 4 
using direct multiparty entanglement purification (solid line) 
and conservative upper bound for methods based on bipartite 
entanglement purification (dashed line) for different errors in 
local operations p. 



VII. PRIVATE MULTIPARTICLE 
ENTANGLEMENT 

As we have seen in the previous section, it is not possi- 
ble to distill perfect cluster states using noisy apparatus. 
For bipartite protocols, however, it was shown in Ref. 
|27| that even using noisy apparatus it is possible to distill 
(asymptotically) private Bell pairs, i. e. Bell pairs which 
are only entangled with the apparatus (i.e. the "labora- 
tories") of the communication parties, but not with any 
other degree of freedom. In a cryptographic scenario, 
this means that the states of the pairs of particles are 
actively disentangled from any eavesdropper who has, in 
the worst case, created the pairs, allowing her in princi- 
ple to entangle them with additional degrees of freedom 
which he or she controls. 

In this section, we show that this is also possible with 
the cluster purification protocol: if the parties only have 
imperfect apparatus which they use to purify cluster 
states, they will not be able to create perfect cluster 
states; however, the final state will be disentangled from 
all channel degrees of freedom. 

The proof is analogous to the proof of Ref. 27]. In a 



first step, the noise which the apparatus introduces dur- 
ing the purification process is replaced by a simple toy- 
model, the lab demon. The lab demon corresponds to an 
intelligent source of noise, which uses a classical random 
number generator in order to apply spin- and phase-flip 
operations on qubits, according to a given probability 
distribution / M „ . The action of the lab demon is thus the 
average of the "flipped" quantum states: 

Pa,... - P' ab = £^V( 6 W..^ a) 4 b) (66) 

Here, p a b... is a density operator of a quantum system, 
which includes two qubits a and b which are located at 
one specific party; however, it will include other qubits. 
The lab demon acts on the two qubits at the same time, 
since the quantum operations in the purification proto- 
cols are two qubit operations; for that reason it would be 
an over-simplification if we assumed that the noise acting 
on two qubits is uncorrelated. 

The labs demon keep notes on which Pauli operators 
were applied to which qubits in which step of the pu- 
rification process. As we will show, the mere knowledge 
of this list will, in the asymptotic limit, suffice to per- 
fectly predict the state of the purified quantum systems. 
In other words, from the lab demon's point of view, all 
purified quantum systems end up in a pure state. Note 
that it is not a priori clear that the lab demon's knowl- 
edge would suffice for the prediction, since the protocol 
includes measurements, and by introducing errors, the 
measurement outcomes will be changed, possibly leading 
to different choices by communicating parties, who might 
throw away qubits which they should have kept and vice 
versa. 

From the list of errors, the lab demons calculate the 
so-called error flags. An error flag as a piece of classi- 
cal information, which is "attached" to each copy of the 
cluster state. In case of a n qubit cluster state, we need n 
classical bits A^) = {x{ 3) , . . . X^) e {0, 1}" for the error 
flag. Here, the index j denotes the number of the cluster- 
state in the ensemble of all cluster states. Initially, before 
the first step of the purification process, all error flags are 
set to zero, i.e. A^' = (0, . . . , 0) for all j. Whenever the 
i-th lab demon applies a phase flip operation (a z ) to the 
i-th qubit of cluster state j, in the error flag j the ith bit 
is flipped, i.e. 

AW) = (A«,...A«,...,A«) 

- A'«) = (aO),...A«,...AW)). (67) 

If he applied an amplitude flip operation (<7 X ), the adja- 
cent bits of the error flag (associated with the neighbors 
of qubit i in the cluster) are flipped, i.e. 

W = (x?\...x^ 1 x ( ?h$ 1 ,...,xW) 

- A'W = (A«,...A«,AP,A«,...A«). (68) 

In both purification sub-protocols PI and P2, two clus- 
ter states are combined, one of which (probabilistically) 
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survives. The error flag vector of the remaining state is 
then given by a function of the both error flags of the in- 
put cluster states. This function is called the flag update 
function for protocol PI and P2, respectively. 



A. The flag update function 

The error flags of the first and second cluster state are 
given by the vectors . . . K n ) and (Ai, A2, . . . A„), 

respectively. For the sub-protocol PI, the flaf update 
function maps these In classical bits onto n classical bits, 



B. The conditional fidelity 

Using the error flag of each cluster state, it is now pos- 
sible to divide the ensemble of all cluster states into 2 n 
sub-ensembles. The state of the sub-ensemble, which be- 
longs to the error flag A, is labelled p( x K It is convenient 
to normalize the density operators of the sub-ensembles 
to the relative frequency of the respective error flags, so 
that the (normalized) total density operator is just the 
sum of the density operators of the sub-ensembles. Using 
this convention, we define the conditional fidelity 



/ flup :{0,l} 2 "^{0,ir 



with 



(«1, ...Kn, Al, 

(«1 © Ai, « 2 , K 3 © A3, K 4 , 
(0,0,... 



..A„) 

. .) if K 2 fe © A 2 fc = OVA; 
, 0) otherwise 



(69) 



The first line of the definition takes into account how er- 
rors are propagated through the CNOTs operation. This 
means, that having applied a certain pattern of error 
operations (given by the error flag vectors) before the 
CNOTs operation is equivalent to applying a different 
pattern of error operations (given by the new error flag 
vector, k' — /fl up (/t, A)) after the CNOTs operation. The 
second line in the definition is the so-called reset rule (see 

H). 

It is necessary to introduce the reset rule, otherwise 
the security proof does not work. The reset rule is found 
by the following heuristics, which is equivalent to the 
heuristics used for the bipartite protocol: 

The flag update function is only used if in the protocol 
the first cluster state is kept. This is the case if the 
values of all even eigenvalues of the second cluster state 
are equal to zero, i.e. \xi © V2 = Hi ffi ^4 = • • • = 0. 
If this is the case, and, at the same time, at least one 
of the "new" error flags associated with the even qubits 
of the second cluster state, has the value "1", then the 
errors in the history of the protocol have summed up in 
such a way that the first cluster state is kept. This is the 
case even though it would have been discarded if there 
had not been introduced any errors. In that case, the 
error flag of the remaining cluster state is set (re-set) to 
(0, 0, ... 0). Note that this coincidence of the two before- 
mentioned conditions happens infrequently; in fact, in 
the course of the purification process, the probability for 
this coincidence converges to zero. 

For the sub- protocol P2, the flag update function can 
be constructed by exchanging even and odd numbers. 
Using this method, an error flag can be calculated for 
each cluster state in each step of the purification process. 
By construction, the error flags only depend on the errors 
introduced by the lab demons. 



P c 



here, the state |\I>r) 



A 



!*> (A) l*x> 



(70) 



I* 



Ai, 



denotes the cluster 



state. The conditional fidelity is a measure for the purity 
of the cluster states from the lab demons point of view: 
since the lab demons know the error flags of all cluster 
states, they can use this information to transform the en- 
semble of all cluster states into an ensemble with fidelity 
P cond . In contrast, the usual fidelity, which is just the 
overlap of the total density operator with the cluster state 

is given by P = (* |ptotai|*o> = (*o| Ea P W l*o>- 
In order to investigate the behavior of the conditional 
fidelity in the course of the purification process, it is nec- 
essary to calculate the states of all 2™ sub-ensembles in 
each step of the purification process. Again, it is useful 
to note that all sub-ensembles are diagonal in the cluster 
basis; the states of all sub-ensembles is thus given by a 
real 2™ x 2™-matrix M. The columns of this matrix are 
the vectors of the diagonal elements of the density matri- 
ces describing the sub-ensembles. Using this convention, 
physical action on the qubits is described by a matrix 
multiplication from the left, and a modification of the 
error flags is described by a matrix multiplication from 
the right. 

Applying a one-qubit depolarizing channel is thus for- 
mally equivalent to a super-operator acting on the matrix 
of the diagonal vectors. To be specific, an error opera- 
tion on qubit i results in flips of the cluster bit i — 1, i, 
or i + 1, respectively (see Sec. Ill C|) . Simultaneously, bit 
i — 1, i, or i + 1, of the error flag is flipped (Eq. 1671 and 
ESJ). The result of applying the error operator is thus 
(for v = x,y,z) 



^0) 



cr. 



cr. 



o~x cr. 



o~x cr x 



(71) 
(72) 
(73) 



Here, a x is the i-th. cluster bit flip operator, which looks 
in the cluster basis like the Pauli operator o~ x in the com- 
putational basis. Under the action of the depolarizing 
channel on qubit i, the matrix M is thus transformed 
into a convex combination of matrices M, 



(i) 



M 



f M+ ]T fvMj? 



(74) 



!/=l,2,3 
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The application of the CNOT operations and the fol- 
lowing measurement can be implemented by the follow- 
ing algorithm. M is the matrix of the diagonal elements 
of the sub-density-matrices before the sub-protocol PI is 
applied, and M' is the result matrix. The algorithm cal- 
culates for all combinations of cluster states the results of 
the CNOT operations. We check the result of the mea- 
surement of cluster state 2; if the results are such that 
the first cluster state is kept, we calculate its state 
and performs for all combinations of error flags the fol- 
lowing steps: (i) calculate the value of the new error flag 
A', using the flag update function, (ii) add to the ma- 
trix element Mp the joint probability that cluster state 
one was in the state \^>t) with error flag k and that the 
cluster state two was in the state 1^-) with error flag A. 
The result of this algorithm is the new matrix M', which 
contains the (non-normalized) states of all sub-ensembles 
after one step in the purification process. 

For the sub-protocol P2, a similar algorithm can be 
given. As a result, we find that the conditional fidelity 
converges to unity in the course of the protocol, while the 
usual fidelity converges to some value F max (see Fig.|SJ|. 




012 3456789 10 

number of steps 

FIG. 8: The fidelity and the conditional fidelity as a function 
of the number of steps in the purification protocol. 



VIII. APPLICATIONS 

In this section, we discuss some possible application 
of our multiparticle entanglement purification protocols. 
Given the fact that the produced entanglement is private, 
one may be able to use multiparty entangled states pro- 
duced in this way for secure communication and compu- 
tation, e.g. secret sharing or secure function evaluation. 
However, a careful analysis of the protocol in the pres- 
ence of a number of distrustful parties is required before 
a final conclusion can be drawn. 



A. Purification of concatenated error correcting 
CSS codes 

A more direct application of the protocol is in the con- 
text of quantum error correction. There exist quantum 
error correction codes which correspond to g raph states. 
In particular, Schlingemann and Werner [18j have shown 
that for certain graph states coding into an error cor- 
recting code can be achieved via a single (Bell) measure- 
ment. That is, a certain graph state \^f)g serves as "en- 
coding state" and an unknown state \<p) = a\0) + f3\l) 
(which contains the quantum information which should 
be encoded) can be encoded by performing "teleporta- 
tion", where plays the role of the channel (singlet) 
in the original teleportation scheme. The result of this 
procedure is an encoded state a\0)i, + /3\1)l, where the 
codewords \0)l, are two orthogonal graph states cor- 
responding to the same graph Q which is directly related 
to the original graph Q. We remark that \^)g completely 
determines the kind of encoding, in particular the proper- 
ties of the corresponding error correcting code. In partic- 
ular, | x I')g can be chosen in such a way that it corresponds 
to a concatenated code with several concatenation levels. 

The basic idea here is to use multiparty entanglement 
purification to purify the encoding states \^)g- That is, 
the resource for encoding is purified and then used to en- 
code the desired quantum informational. We emphasize 
that independent of the kind of code used (in particular, 
independent of the number of concatenation levels when 
using a concatenated code) , the final encoding takes place 
by performing a single Bell measurement. That is, a mea- 
surement in the basis with = 1 ® <7i|$ + ). As 
in the original teleportation scheme, one can perform lo- 
cal unitary operations depending on the measurement 
outcome such that the resulting state is for all possible 
measurement outcomes given by a|0)z, + /3|1) l- 

Many of graphs corresponding to error correcting codes 
are two-colorable which ensures that our entanglement 
purification protocol can be successfully applied. In par- 
ticular, all CSS-codes are equivalent to two-colorable 
graph states ff(|. For instance, the graph correspond- 
ing to the seven qubit steane code (a CSS (7, 1, 3) code) 
is given by a cube (see Fig. [TJ, which is clearly two- 
colorable. Note that also the concatenated code of this 
kind may correspond to a two-colorable graph state. In 
fact, the corresponding graph at the next concatenation 
level can be obtained by appending to each vertex of the 
cube another cube with seven new vertices and measuring 
the vertices of the initial cube in the eigenbasis of a x . By 
concatenating this procedure, i.e. appending new cubes 
on each of the vertices and performing the corresponding 
measurement, one obtains the graph corresponding to 
the encoding states for concatenated CSS code. When 
postponing the a x measurements, we have in fact that 
the resulting graph state is still two- color able. Note that 
the measurement implements the encoding procedure, i.e. 
information which is initially represented in the state of 
the qubit of a single vertex is encoded into the qubits of 
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seven new vertices. 

We find that the entire encoding circuit which serves 
to encode a given qubit into a certain (concatenated) 
code of a larger number of qubits can be replaced by the 
following simple procedure. One first creates the graph 
state corresponding to a cube, where each vertex of the 
cube may have another cube appended (and so on when 
dealing with more concatenation levels). Note that the 
vertices of new cubes which are appended are not yet 
measured. The qubit to be encoded is then measured 
together with the particle V\ of the first cube in the Bell 
basis. A sequence of measurements in the eigenbasis of 
g x completes the encoding procedure: one starts with the 
vertices of the cube at concatenation level one, followed 
by the vertices of the cubes at concatenation level 2 etc., 
until only qubits at the highest concatenation level are 
left. That is, the quantum information of the initial qubit 
(one logical bit) is now encoded into 7 k physical qubits, 
where k gives the number of concatenation levels. In case 
all operations involved in this procedure are perfect, this 
results in an error free encoding. However, given that 
operations used in the manipulation and creation of the 
states are imperfect, the encoding will not be perfect. In 
particular, the main difficulty in the procedure described 
above is the creation of the multiparticlc entangled graph 
state corresponding to the graph with (appended) cubes. 
Since this graph is two-colorable, one can apply our en- 
tanglement purification protocol to improve the fidelity 
of this state — and hence improve the achievable fidelity 
of encoding. 



B. Purification of algorithms 

We also note that graph states are an algorithmic re- 
source. In the same way as a cluster state is a universal 
resource for measurement based quantum computation, 
certain graph states are a specific resource for a given 
quantum algorithm 15]. That is, a quantum algorithm 
(e.g. a quantum fourier transformation) can be imple- 
mented by consuming an algorithmic specific resource — 
the graph state in question — by performing local mea- 
surement only. Again, in the presence of imperfect opera- 
tions the corresponding graph state may not be available 
with unit fidelity. However, our entanglement purifica- 
tion protocol allows one to increase the fidelity of the 
graph state and hence the fidelity of the implementation 
of the algorithm. This opens up new possibilities for the 
use of EPP in quantum computation [25| and for fault 
tolerant computation pfjj ]. Important issues in this con- 
text are fault tolerance and error correction, which will 
be discussed in more detail in a forthcoming publication 

it 



IX. EXPERIMENTAL REALIZATION 

In this section, we propose an experimental real- 
ization of multiparticlc entanglement purification pro- 
tocols usin g n eutral atoms trapped in optical lattices 
IH HI HH. We show that multiparticle entan- 

glement purification protocols can be used in such sys- 
tems to increase the fidelity of cluster states. In particu- 
lar, we consider the purification of ID cluster states in a 
2D lattice, which can be straightforwardly generalized to 
the purification of 2D cluster states in a 3D lattice. We 
show on the one hand that the effect of decoherence can 
be overcome by using a scheme based on entanglement 
pumping. On the other hand, we find that implementing 
the standard recurrence scheme allows one to increase 
the achievable fidelity of cluster states. This result is 
quite remarkable, as the same imperfect operations are 
involved in the creation of the cluster state and in the 
purification process. 

A. Physical Implementation 

Consider a two-dimensional NxN optical lattice filled 
with one atom per lattice site. Internal states of the 
atoms — which constitute the qubits — can be manip- 
ulated by means of laser pulses. While in the present 
experimental setup addressing of individual atoms is still 
a problem, there are proposals to overcome this limita- 
tion, for example by expanding the lattice, or by using 
reloading techniques into lattices with larger spacing. In 
the following we will assume that individual addressing of 
the atoms is possible. Interactions between neighboring 
atoms take place e.g. by state-selectively shifting the lat- 
tice, leading to a state dependent collisional phase arising 
from controlled cold collisions [291 |3j| . The interaction 
Hamiltonian describing a lattice shift in the x-direction 
is given by 

H x = 4g(t) £(1 - <t^>)/2 ® (1 - ai k+1 ^)/2, (75) 
(k,l) 

where (k,l) labels the (x, y)-coordinatc of the atom. 
Note that for J g(t)dt = ir, such an interaction produces 
N copies of one dimensional cluster states along the x- 
direction of the lattice when applied to states of the form 
(|0) + |1))® JV . These states can than be purified by using 
lattice shifts along the y-direction as follows. In a first 
step, we want to (simultaneously) implement protocol PI 
to the linear cluster states in rows 21 and 21 + 1. We have 
that H y is equivalent up to local unitary operations to 
the Ising Hamiltonian 

Hi = g(t) a i k ' l) ® a i k,l+1) ■ ( 76 ) 

On the one hand, applying Hj for J g(t)dt = tt/2, fol- 
lowed by the local unitary operation a x applied to parti- 
cles (k, 4/), (k, 4Z + 1) before and after another application 
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of Hi for J g(t)dt = tt/2 results into an effective interac- 
tion Hi which performs phase gates between rows 21 and 
21 + 1, while the interaction between rows 21 + 1 and 21 + 2 
is cancelled. By means of local operations performed be- 
fore and after the application of Hi, one can convert each 
of these phase gates into a CNOT gate with the freedom 
of choosing source and target for each pair of particles in- 
dependently. This allows one to implement protocol PI 
simultaneously to N/2 pairs of linear cluster states with a 
total of two sweeps of the lattice in y-direction. The final 
measurement of the cluster states in rows 41 — 1, 41 leaves 
us — in the case the measurement was successful — with 
linear cluster states of improved fidelity at rows 41+1, 
41 + 2, which can further be purified by applying protocol 
P2 in a similar way. Note that iterations of the protocol 
may involve lattice shifts over longer distances. 

B. Improved Fidelity 

We now analyze the purification protocol sketched 
above in the case where the operations involved in the 
procedure are imperfect. Specifically, we consider the 
interactions between neighboring atoms — and thus also 
the resulting CNOT operations — to be imperfect. There 
are various possible sources of imperfections, ranging 
from imperfection in the laser manipulation of the in- 
ternal states of the atoms to fluctuations in the desired 
interaction time. We will consider a simple model to 
describe imperfections in the gates. As in the previous 
discussion, we describe imperfect operations by a com- 
pletely positive map which consists of first applying a 
partially depolarizing channel with error parameter p to 
the individual particles followed by the perfect operation 
(see discussion in Sec. IIVI in particular Eq. 1)32(1). To 
be consistent, we assume that the same imperfect opera- 
tions are involved in the creation of the cluster state and 
in the purification procedure. In the procedure sketched 
above, both processes, the creation of cluster states and 
the implementation of gates in the purification, arc phys- 
ically implemented by the same procedure and thus our 
assumption that both processes suffer from same imper- 
fections is reasonable in such systems. In particular, clus- 
ter states are created by shifting the lattice along the re- 
direction, while interactions between neighboring atoms 
resulting in a CNOT operation (used for entanglement 
purification) are implemented by a lattice shift along the 
y-direction. 

We now compare the fidelity of ID cluster states cre- 
ated directly in the lattice by simply shifting it along the 
x-direction with the achievable fidelity when using above 
purification procedure. Up to local unitary operations, 
the gate operation involved in the creation of the cluster 
state is given by 

U(t) = e- itfl WS(*.o'i* ,0 ®»i* +1,0 

= TT e -«fl(*)^* , ' ) ®<^ fc+1,,) ) ( 77 ) 
(k,i) 



N = 2 


F = 0.9900 


Fmax = 0.9889 


N = 3 


F = 0.9753 


F max = 0.9836 


N = 4 


F = 0.9608 


F max = 0.9785 


N = 5 


F = 0.9465 


F max = 0.9734 


N = 6 


F = 0.9324 


F max = 0.9681 



TABLE I: Fidelity F of linear cluster state of size N created 
using imperfect operations with error parameter p = 0.99 and 
achievable fidelity F max when using entanglement purification 
with noisy operations of the same quality. 

i.e. corresponds to a sequential application of phase gates 
to neighboring particles. Note that we have J g(t)dt = 
tt/2 in this case, and that initially all atoms are prepared 
in state 1/V2(|0) -I- |1)). Assuming that each of these 
phase gates is imperfect and modelled by Eq. lp£Z)l. one 
readily obtains the fidelity of the resulting state. The 
results for p — 0.99 for different sizes of the cluster state 
are summarized in Table [I] 

The maximal achievable fidelity F max of the recurrence 
protocol implemented in an optical lattice when consid- 
ering imperfect CNOT operations can be readily deter- 
mined. We assume that the state created by the lattice 
shift along the x-direction is used as input state for the 
purification protocol. As one can see from Table [Q the 
achievable fidelity can be significantly enhanced by the 
purification procedure, although the operations involved 
in the creation of the cluster state and in the purification 
procedure have the same fidelity. 



C. Entanglement pumping 

In the discussion of the entanglement purification pro- 
tocol in the previous paragraph, we assumed that the 
original recurrence protocol is applied. In particular, this 
involves in each step of the protocol a manipulation of 
two identical copies of the state obtained in the preced- 
ing round of the protocol. A modified protocol which is 
called "entanglement pumping" operates always on one 
copy of the state to be purified (whose fidelity increases 
during the process) and on a second state of some stan- 
dard form. The fidelity of the second state is always the 
same throughout the procedure. That is, the input state 
at stage k of the protocol is given by p — Pk-i®Pa, where 
Pk-i is the state obtained in the previous round, while po 
is the initial state. Note that also in this case, protocols 
PI and P2 are iteratively applied. 

On the one hand, entanglement pumping offers the ad- 
vantage to use always states of a certain standard form 
which may be easy to produce, e.g. they may arise from 
sending a locally prepared cluster states through noisy 
quantum channels to several parties. The possibility to 
produce these states on demand reduces the required 
storage capabilities of the whole procedure, as only two 
copies of the state have to be stored simultaneously when 
using entanglement pumping, while the application of the 
standard recurrence protocol typically requires simulta- 
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neous storage of hundreds of copies of the state. On the 
other hand, entanglement pumping has the disadvantage 
that even in the case of noiseless local operations no max- 
imally entangled pure states can be produced. Iterative 
application of the protocol only allows one to increase the 
fidelity of the state by a certain amount. By applying a 
nested entanglement pumping scheme (introduced in Ref. 
|25j ^l one can overcome this limitation. A few nesting lev- 
els — which correspond to the number of extra copies of 
the state which need to be stored simultaneously — typ- 
ically suffice to reach fidelities close to those achievable 
with the standard recurrence protocol. 

It turns out that entanglement pumping — in contrast 
to the standard recurrence scheme — does not allow one 
to increase the fidelity of cluster states if the noisy opera- 
tions used to create the states are also used in the purifi- 
cation procedure. However, entanglement pumping may 
still be used to maintain high fidelity cluster states in the 
presence of decoherence, i.e. to stabilize these states. In 
optical lattice systems the implementation of entangle- 
ment pumping is even simpler than the implementation 
of the standard recurrence scheme. The production of 
the linear cluster state po can be accomplished by a lat- 
tice shift along the x direction. The state to be purified 
should in this procedure not participate on the interac- 
tion. One possibility to achieve this is by transferring 
the state of the neutral atoms to internal states which 
are trapped in an independent lattice potential which is 
not moving. Another option is to apply two lattice shifts 
intercepted by local unitary operations on this copy of 
the state which are chosen in such a way that the inter- 
action cancels. This is similar to the procedure described 
in Sec. IIX Al to implement CNOT gates between certain 
pairs of atoms, while no interaction takes place between 
certain other pairs. Note that a implementation of the 
entanglement pumping protocol for a iV-particle linear 
cluster state only requires a N x 2 lattice. 

X. SUMMARY AND CONCLUSIONS 

In this paper we have analyzed in detail entanglement 
purification protocols (recurrence schemes and hashing 
protocols) which are capable of purifying arbitrary two- 
colorable graph states. For the recurrence schemes, we 
found that (i) The purification regime of the protocol for 



graph states does depend on the degree of the graph, but 
is independent of the number of particles N. That is, the 
resulting state p arising from a perfect cluster state due 
to channel noise (local decoherence) can be successfully 
distilled using the protocol as far as the decoherence per 
particle is below a certain threshold value which depends 
on the degree of the graph, but is independent of N; (ii) 
In the case of noisy local control operations, we observe 
that the corresponding threshold for local control opera- 
tions such that the protocol can be successfully applied 
is for cluster states (and similar states where the degree 
of the corresponding graph does not depend on N) is 
independent of the size of the system. In contrast, the 
requirements to purify GHZ states become more strin- 
gent for increasing N. We have that (i) and (ii) together 
suggest that our protocol may be used for practical ap- 
plications to purify certain states, e.g. in the context 
of purification of quantum algorithms or concatenated 
quantum error correction codes. We have also shown 
that the entanglement created by our purification pro- 
tocol is private, an important feature for possible appli- 
cations for secure communication and computation. We 
have compared multiparty entanglement purification pro- 
tocols with protocols based on bipartite entanglement 
purification and found that direct multiparticle entan- 
glement purification is not only more efficient, but also 
the achievable fidelity of the state is larger. Finally we 
proposed a possible experimental implementation of the 
protocol based on neutral atoms in an optical lattice. 
This scheme allows one to increase the fidelity of cluster 
states created in such systems. 

We are confident that multiparticle entanglement pu- 
rification will prove a useful tool in various branches of 
quantum information, ranging from measurement based 
quantum computation over quantum error correction to 
applications in quantum security and quantum commu- 
nication. 

Note added: After completion of this work, we have 
learned about similar results on a hashing method to pu- 
rify CSS states by Kai Chen and Hoi-Kwong Lo [34[ . 

We thank R. Raussendorf, M. Grassl, M. Hein and 
P. Aliferis for discussions and remarks. This work was 
supported by the Deutsche Forschungsgemeinschaft and 
the European Union (IST-2001-38877,39227). W.D. ac- 
knowledges support from the Osterreichische Akademie 
der Wissenschaften through project APART. 



[1] C. H. Bennett, G. Brassard, C. Crepeau, R. Jozsa, A. 
Peres, and W. K. Wootters, Phys. Rev. Lett. 70, 1895 
(1993). 

[2] C. H. Bennett and S. J. Wiesner, Phys. Rev. Lett. 69, 
2881 (1992). 

[3] A. Ekert, Phys. Rev. Lett. 67, 661 (1991). 

[4] A. Karlsson, M. Koashi, and N. Imoto, Phys. Rev. A 59, 
162 (1999); M. Hillery, V. Buzek, and A. Berthiaume, 
Phys. Rev. A 59, 1829 (1999). R. Cleve, D. Gottesman, 



and Hoi-Kwong Lo, Phys. Rev. Lett. 83, 648 (1999). 
[5] C. Crepeau, D. Gottesman and A. Smith, Proceedings of 

the thirty-fourth annual ACM symposium on Theory of 

computing, Montreal, Quebec, Canada, 643 - 652 (2002) 

(E-print quant-ph/0206138 ). 
[6] D. J. Wineland, J. J. Bollinger, W. M. Itano, F. L. Moore, 

and D. J. Heinzen, Phys. Rev. A 46, R6797 (1992). 
[7] S.F Huelga, C. Macchiavello, T. Pellizzari, A.K. Ekert, 

M. B. Plenio, J.I. Cirac, Phys. Rev. Lett. 79, 3865 (1997). 



22 



[8] H.-J. Briegel and R. Raussendorf, Phys. Rev. Lett. 86, 
910 (2001). 

[9] R. Raussendorf and H.-J. Briegel, Phys. Rev. Lett. 86, 
5188 (2001). 

[10] C. H. Bennett, G. Brassard, S. Popescu, B. Schumacher, 
J. A. Smolin and W. K. Wootters Phys. Rev. Lett. 76, 
722 (1996); C. H.Bennett, D. P. DiVincenzo, J. A. Smolin 
and W. K. Wootters, Phys. Rev. A 54, 3824 (1996). 

[11] D. Deutsch, A. Ekert, C. Macchiavello, S. Popescu, and 
A. Sanpera, Phys. Rev. Lett. 77 , 2818 (1996). 

[12] M. Murao, M. B. Plenio, S. Popescu, V. Vedral, and P. 
L. Knight, Phys. Rev. A 57, R4075 (1998). 

[13] E. N. Maneva and J. A. Smolin, in Quantum Compu- 
tation and Quantum Information, edited by J. Samuel 
J. Lomonaco (American Mathemathical Society, Provi- 
dence, RI, 2002), Vol. 30 5 of AMS Contemp urary Math- 
ematics; see also E-print quant-ph/0003099 

[14] W. Diir, H. Aschauer and H.-J. Briegel, Phys. Rev. Lett. 
91, 107903 (2003). 

[15] R. Raussendorf, D. Browne and H.-J. Briegel, Phys. Rev. 
A 68, 022312 (2003). 

[16] E. Rains and Hoi-Kwong Lo, private communication (see 
also Ref. E% ). 

[17] J. Eisert and H.-J. Briegel, Phys. Rev. A 64, 022306 
(2001). 

[18] D. Schlingemann and R. F. Werner, Phys. Rev. A 65, 
012308 (2002); M. Grassl et al., in Proceedings of the 
ISIT, Lausanne, 2002 (IEEE, Piscataway, NJ, 2002), p. 
45. 

[19] M. Hein, J. Eisert and H.-J. Briegel, Phys. Rev. A 69, 
062311 (2004). 

[20] M. Van den Nest, J. Dehaene, and B. De Moor, Phys. 
Rev. A 69, 022316 (2004); M. Van den Nest, J. Dehaene, 
and B. De Moor, Phys. Rev. A 70, 034302 (2004). 



[21] The CNOT operation is defined by \i)a\3)b -> \i)a\i @ 
j)b, where © denotes addition modulo 2. 

[22] States corresponding to graphs with a very high symme- 
try may not exactly follow this behaviour. Due to the fact 
that all neighbouring particles of a vertex are affected by 
a bit flip error occuring at this vertex, sometimes errors 
may annihilate each other or affect the whole system in 
such a way that only a certain subspace is populated. 
As low rank density matrices are sometimes quite robust 
against noise, this can result in a behaviour for certain 
graph states not expected by this intuitive explanation. 

[23] W. Diir and H.-J. Briegel, Phys. Rev. Lett. 92, 180403 
(2004). 

[24] N. Linden, S. Popescu, B. Schumacher and M. Westmore- 
land, quant-ph/9912039 

[25] W. Diir and H.-J. Briegel, Phys. Rev. Lett. 90, 067901 
(2003). 

[26] R. Raussendorf, S. Anders et al., unpublished. 

[27] H. Aschauer and H.-J. Briegel, Phys. Rev. Lett. 88, 
047902 (2002); ibid Phys. Rev. A 66, 032302 (2002). 

[28] H. Aschauer, PhD thesis, LMU Munich (2004). 

[29] D. Jaksch, H.-J. Briegel, J. I. Cirac, C. W. Gardiner and 
P. Zoller, Phys. Rev. Lett. 82, 1975 (1999). 

[30] M. Greiner, O. Mandel, T. Esslinger, T.W. Hansen and 
I. Bloch, Nature 415, 39 (2002). 

[31] M. Greiner, O. Mandel, T. W. Hansen and I. Bloch, Na- 
ture 419, 51 (2002). 

[32] O. Mandel, M. Greiner, A. Widera, T. Rom, T.W. 
Hansen, and I. Bloch, Phys. Rev. Lett. 91, 010407 (2003). 

[33] O. Mandel, M. Greiner, A. Widera, T. Rom, T. W. 
Hansen, and I. Bloch, Nature 425, 937 (2003). 

[34] Kai Chen and Hoi-Kwong Lo, quant-ph/0404133 



